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THESIS DISCLAIMER 



The reader is cautioned that computer programs developed 
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time available, to ensure that the programs are free of 
computational and logic errors, they cannot be considered 
validated. Any application of these programs without 
additional verification is at the risk of the user. 
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I. INTRODUCTION 



A. BACKGROUND 

Future systems will provide the pilot with information 
rather than raw data. This Information will probably be 
presented to the pilot in the form of situation reporting, 
presentation of the options, and probabilities connected 
with various courses of action tRef. 1: p. 28]. James A. 

Guffy, unit chief. Advanced AI Technology Concepts, stated 
[Ref. 2: p.66]: 

The way it stands now, a pilot is often drowning in 
data but is starved for information. That's the problem 

the Pilot's Associate program was created to 

address. Its role is to Increase the pilot's decision- 
making capability and improve mission effectiveness. 

The need for an improved decision-making capability is 

evident from aircraft accident statistics. The cause/factor 

elements Involved in aircraft accidents may be grouped into 

three general categories: 

( 1 ) Environmental extreme. 

( 2 ) Material failure. 

( 3 ) Human error. 

Environmental extremes are usually external to the 
cockpit and beyond the pilot's control. Material failures 
are hardware malfunctions and structural failures. Human 
errors are procedural and judgmental errors, not necessarily 
by the pilot. Errors on the part of the designer or air 
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traffic controller are certainly human. However, pilot error 
is cited most often (Ref 3: p.l3). 

Human(pilot) errors can be partitioned into five 

categories (Ref 4: p.7): 

( 1 ) Retroactive Interference - The action of the 
individual is not identified with the problem at 
hand. This is motivated by an assimilation of prior 
input into an ongoing program. 

( 2 ) Reductive Coding - An overload of input or a complex 
stages of events, precludes the correct handling of 
the situation. 

( 3 ) Psychological Refractory Phase - The human unit 
receives the input. However, a simultaneous 

transference of this information does not occur. 
There is a segment of time berween the input and 
output, leaving a window open to information loss or 
personal interpolation of an event or incoming data. 

( 4 ) Inferential Shortcomings - Application or knowladge 
structures and heuristics to a situation for 
supposition of data which is non-existent. In short 
human error due to assumption. 

( 5 ) Leadership and Crew Coordination - Protocol and the 
social hierarchy of the aircraft are examined in 
reference to their role in the cockpit environment. 

A single element or a combination of these elements could 

invoke an error. 

The pilot of an aircraft is tasked with monitoring many 
gauges in the cockpit. A system such as the one proposed 
could improve pilot effectiveness to some degree in all five 
categories listed above, particularly in the areas of 
reductive coding and Inferential shortcomings . The system 
continuously monitors the gauges and is kept abreast of the 
aircraft systems they represent. In case of an emergency, 
any problem that is presented to the pilot is also presented 
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to the system. Recommended actions are returned to the 
pilot, by the system, for cross reference or confirmation. 

B. OBJECTIVE 

The overall objective is to raise to a higher level of 
abstraction the real-time performance data available to the 
pilot, utilizing artificial intelligence techniques. The 

objectives in particular are as follows: 

( 1 ) Show that useful information can be provided to the 
pilot, in terms of procedural recommendations and 
diagnosis, rapidly with the existing sensor input. 

( 2 ) Quantify, through implementation, the amount of 

information processing necessary to sufficiently 

define the aircraft emergencies (Ref 5: p.2]. 

( 3 ) Show the feasibility of a system with multiple 

knowledge bases. 

( 4 ) Show that means-ends analysis is an appropriate 

problem solving formalism on which to solve the 
problem. 



C. SCOPE 

This system is implemented around the United States 
1 

Marine Corps AH-IT helicopter. It demonstrates the ability 
of this problem solving paradigm to diagnose compound 
aircraft emergencies and present recommendations to the 
pilot, in the context of the objectives stated above. Twenty 
categories of inflight emergencies, for the AH-IT, are 



1 

The AH-lT is a tandem seat, two place (pilot and 
copilot/gunner) twin engine attack helicopter manufactured 
by Bell Helicopter Textron, 
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One category, engine 



1 

listed in the NATOPS Plight Manual 
malfunctions, is concentrated on. 



D. ASSUMPTIONS 

Three assumptions have been made to simplify 

implementation : 

( 1 ) No discrepancies exist between the gauges and 

caution lights. Caution lights illuminate to show 
fault conditions. They are housed together in a 
cluster called a master caution panel. It is 
assumed that these lights are not faulty. 

( 2 ) All indications presented to the pilot are 

correct. As a result of this, no emergency is 
caused by a faulty gauge. 

( 3 ) The aircraft is operating in the high altitude 
environment . 



E. MATERIALS AND EQUIPMENT 

The design was implemented in Turbo Prolog [Ref. 6 p.ll 
on an IBM AT computer. 



1 

The NATOPS Flight Manual is issued by the authority of 
the Chief of Naval Operations and under the direction of 
Commander, Naval Air Systems Command in conjunction with the 
Naval Air Training and Operating Procedures Standardization 
(NATOPS) Program. This manual standardizes ground and flight 
procedures based on professional knowledge and experience. 
Compliance with this manual is mandatory except where stated 
within the manual. 
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I I . SUMMARY OF CURRENT KNOWLEDGE 



A. INDUSTRY 

Substantial emphasis in AI developments to date has 
remained in the mi 1 itary/ industr ial area. 

Accelerating activity in artificial intelligence and 
expert systems is pressing researchers to take a long look 
ahead toward real-world applications in a variety of 
aerospace systems, where the technology holds promise of 
enhancing human capabilities. iRef 2; p.401 

One major driver is the funding and research base 
provided by the Defense Advanced Research Projects Agency's 
(DARPA) Strategic Computing Initiative and, more 
specifically, particular areas targeted by DARPA for initial 
technology applications [Ref. 7 p. 461. 

1. Pilot Aids 

Development of the Pilot's Associate, an 

intelligent, personalized airborne system, has moved ahead 

significantly with award of three-year Phase 1 contracts to 

two industry teams headed by Lockheed-Georgia Co. and 

McDonnell Aircraft Co. [Ref. 8 p. 341. Initially, it will 

consist of four interactive expert systems [Ref. 4: p.471; 

( 1 ) A Situation Assessment Manager to assess the 

external environment as well as internal resources. 

( 2 ) A Tactical Planning Manager to recommend optimum 
tactical employment of the aircraft, given mission 
objectives and restrictions. 

( 3 ) A Mission Planning Manager to refine and redefine 
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mission objectives, given current situation, 
command, and intelligence inputs. 

( 4 ) A System Status Manager to monitor and diagnose 
total system health and current/projected status 
of all on-board systems. 

Texas Instruments research included development of an 
emergency procedures expert system (EPES), focusing on 
aiding pilots of USAF/General Dynamics ?-lS fighters in 
certain multiple emergency situations [Ref. 3 p,893. 

2 . Maintenance Expert System 

McDonnell Douglas Aircraft Corn. has conducted 
flight tests or an avionics integrated (AIMES) maintenance 
expert syscem aboard a Navy/Mcdonnell Douglas F/A-13. During 
operation, AIMES monitors the aircraft's mission computers 
for avionics failure indications and records general data 
from suspect avionic boxes. The expert system then generates 
queries based upon the general data. Tests are performed by 
the system to determine the validity of the queries and a 
conclusion concerning the failure is reached. During 

interrogation the system can provide the fault data, name 
the avionics card that has failed, and detail the reasoning 
that lead to the fault isolation conclusion [Ref .2 p.63]. 

3 . Space Station Operations 

The Boeing Aerospace Co. is addressing expert 

systems in space station operations, and expert systems as 
pilot decision aids. Expert systems development for the 
manned space station is focused on the automation of 
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housekeeping functions, one of which is electrical power 
control, with emphasis on fault detection and isolation and 
energy management. The system is optimized for diagnosing 
multiple or simultaneous faults. In pilot decision aids, 
Boeing is applying expert systems technology to the 
pictorial format cockpit display it is developing for the 
Air Force Systems Command's Aeronautical Systems Div. The 
display system, called the crew information manager, will 
use picture symbols instead of numbers to present real-time 
flight and mission information for all-weather operations in 
a variety of military aircraft. Boeing expects that work on 
the system will continue under OARPA's Pilot's Associate 
program when the currant contracr expires [Ref. 2: p.79]. 

B. ACADEMIA 

Planners are but one of many types of expert systems. 
The expert system proposed in this paper is of the planner 
type. There are four basic approaches to planning: 
hierarchical, non-hierarchical, script-based, and 
opportunistic. 

1. Non-hierarchical Planners 

Hierarchical is interpreted as having a hierarchy of 
representations of a plan in which the highest is a 
simplification, or abstraction, of the plan and the lowest 
is a detailed plan, sufficient to solve the problem. A non- 
hierarchical planner develops a sequence of problem-solving 
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actions to achieve each of its goals and usually has only 
one representation of a plan. Some examples of non- 
hierarchical planners are STRIPS (Ref. 10 p.523] and HACKER 
(Ref. 10 p.531]. HACKER generates initial plans that violate 
ordering constraints and then tries to go back and them. 
This is based on a Linearity assumption, which is that 
subgoals are independent and thus can be sequentially 
achieved in an arbitrary order. The Linearity assumption is 
used in cases where there is no a priori reason to order one 
operator ahead of another (Ref. 10: p. 520). This assumption 
could not be made for this implementation. The actions taken 
by the pilot must be ordered and thus the recommendations to 
the pilot by the system must be ordered. A characteristic 
of non-hierarchical planners is the inability to distinguish 
between the relative importance of recommended actions. 

Means-ends analysis is often used in non-hierarchical 
planners (Ref. 10: p. 517], but is also considered by many to 
be a hierarchical itself. Means-ends is appropriate when it 
is known how each problem-solving operator changes the state 
of the world and knows the preconditions for an operator to 
be executed (Ref. 10: p. 524). Operators or actions are 
selected according to their ability to reduce the observed 
difference between the current state and the goal state. 
(Ref. 5: p.147). 

. . . to select these operators, means-ends analysis must 
be provided with a table listing the best operator for 
classes of states. These tables refer to the difference 
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between the current state and the goal state, and are thus 
called difference tables. 

Difference tables provide a way of decomposing a hard 
problem into simpler sub-problems recursively, thus making 
means-ends a recursive search. Means-ends analysis is also 
called hierarchical reasoning. (Ref. 11: p. 11.1] 

2 . Hierarchical Planners 

Hierarchical planners utilize a hierarchy of 
representations of a plan and are designed to solve some of 
the problems with nonhierarchical planners. Examples are 
NOAH (Ref. 10 p.541), MOLGEN, (Ref. 10 p.5511 and ABSTRIPS 
(Ref. 10 p.5231. First a plan is sketched out. The initial 
sketch, even though complete, is usually vague. Those parts 
that are vague are refined into more detailed sub-plans 
until finally the plan has been refined to a complete 
sequence of detailed problem-solving operators. The major 
advantage to this is that it provides a means of ignoring 
the details that obscure or complicate a problem (Ref. 10 p. 
517 J. Because these planners are able to represent a problem 
at different levels of abstraction, they tend to be very 
elaborate but effective planning models. 

3 . Scr iot-Based Planners 

The script-based method utilizes stored plans which 
contain the outlines for solving different kinds of problems 
over a range of classes. One of the MOLGEN systems was 
Implemented in this manner. First a skeleton plan is found 
that is applicable to the given problem. Then the abstract 
steps in the plan are filled in with problem-solving 
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operators from the particular problem context. If this can 
be done for each abstracted step, then the plan as a whole 
will be successful (Ref. 10: p. 5181. Operators are not 

ordered until constraints are available to guide ordering. 
This eliminates premature commitment that could cause a 
conflict with other parts of the plan. Scripts are not well 
suited to diagnosis of compound amergencias because ail 
scripts can’t be anticipated and thus pre-written. 

4 . ODoortunistlc Planners 

Opportunistic pia.nners are different from those 
discussed thus far. Operators, or steps in the plan are 
introduced whenever the opportunity arises. This contrasts 
greatly with the least ccmmi intent strategies in NOAH and 
MOLGEN. Another characteristic of these planners is 
multidirectionality. Planning takes place on several levels 
simultaneously. 

CRYSALIS is an example of an opportunistic planner. 
It uses a blackboard type data-structure to represent the 
complex control structure of human planning. This involves 
having a number of specialist programs that produce 
hypothesis about data posted on the blackboard. These 
hypotheses are available to all other specialists. 

The blackboard is divided into planes. Planes are 
organized to reflect characteristic processes in planning. 
The five categories of planes are (a) the plan plane which 
is the actual plan or executive decisions; (b) the meta-plan 
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plane contains information on the general approach, such as 
designating means-ends or some other approach; (c) the plan 
abstraction plane which contains desirable actions in 
general, and controls the plan plane; (d) the knowledge-base 
plane which contains world or external knowledge; and (e) 
the executive plane schedules the planning decisions made by 
the blackboard (Ref. 10: p. 25j. 

The disadvantage of this method is that it is more 
likely to rewrite parts of its plan or change its goals than 
is a hierarchical planner. This takes up valuable time wnen 
dealing with real-time constraints. 
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HI. CONCEPT OF THE PLANNER 



This planner is passive taking no action on its own. Its 
reconunendations to the pilot would appear on a digital 
display on the instrument panel. This system could be a 
replacement for, or supplement to, the master caution panel. 

The planner is autonomous in detecting its own goals 
based on the current state description^ rather than simply 
having the goals handed to it. The system initializes the 
goals to the empty list, and checks the gauges and caution 
lights for the initial establishment of goals. Any 

fluctuations, increases or decreases in component status, 
require a response. 

A means-end control structure does several things: 

( 1 ) Means-ends analysis attempts to reduce the 

difference between the current state and the goal 

state . 

( 2 ) Subgoals are created via problem reduction. 

( 3 ) Planning is incorporated by deferring actions until 
after the overall solution path is established. 

A. KERNEL 

The means-ends control structure was written, in prolog, 
by Dr. Neil C. Rowe (Ref. 11 p.11.3]. This control 

structure, and the process of goal acquision, make up the 
The kernel of the planner. Once the goals have been acquired 
and resolved, the facts, in a knowledge-base set along with 
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means-ends-analysis, are used to satisfy these goals. As 
with most expert systems, the size of the kernel is small in 
comparison to the facts in the knowledge-base. 

B. KNOWLEDGE-BASE SETS 

The planner consists of multiple knowledge-base sets 
that enable it to efficiently satisfy goals and to 
appropriately respond to different requirements in different 
flight regimes. A knowledge-base set consists of: 

( 1 ) Recommended operators for achieving goals. 

( 2 ) The preconditions for the usage of operators. 

( 3 ) The ef f ects ( postcondi tlons ) on the state 

description as a result of the application of 
operators . 

The partitioning of the knowledge-base is critical to 
both efficiency and correctness. What*s recommended for a 
goal in a high altitude environment could be different from 
that in a low altitude environment. As a result, different 
knowledge-base sets are required. 

The concept of multiple knowledge-base sets is very 
similar to an air traffic controllers' handling of aircraft 
in different control sectors. Once the aircraft leaves a 
given knowledge-base set's domain, a different knowledge-base 
set is asserted. 

A response to an emergency in a helicopter is in many 
cases predicated on the aircraft's altitude and airspeed. 
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Domains defined in terms of altitude or airspeed can be made 
active when the aircraft enters its domain. 

Although this system requires multiple knowledge-base 
sets, only one is implemented. Only the knowledge-base would 
need to be changed to adapt it to another aircraft. 
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IV. IMPLEMENTATION OF THE PLANNER 



This chapter describes what techniques were used to 
construct the planner and why this particular implementation 
was chosen, 

A. PROGRAMMING LANGUAGE 

Lisp is the most widely used programming language in 

artificial intelligence today. However, Prolog, a relatively 

newer language, is gaining in popularity. 

Prolog has three positive features that give it key 
advantages over Lisp. First, Prolog in syntax and 

semantics is much closer to formal logic. The programs are 
better understood and better maintained. Second, Prolog 
provides automatic backtrack ing , a feature that simplifies 
the writing of search routines . Third, Prolog allows a 
procedure definition to be used for many different kinds 
of reasoning by allowing the designated input and output 
parameters to vary from call to call. [Ref. 11: preface] 

The availability of a Prolog compiler for the IBM AT was 
a very important factor in this implementation. The run time 
required to provide the recommended operators for a 

prescribed goal was of great interest. Turbo Prolog is one 
of the fastest of the implementations developed for the IBM 
AT and compatibles [Ref. 12: p. 2541. 

B . APPROACH 

First, it is necessary to discuss the data types and 
symbols used in the program. 
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The caution panel cluster Is represented by symbols each 
corresponding to a single caution light or segment in the 
cluster. A list of these segments is a segment_llst . These 
segments are shown in Figure 4.1. 



segment 



engl_ol2 _press 

engl_chip_detr 

engl_f uel_f i I ter 

dc_gen_l 

xmsn_chi p_detr 

temp _press_90 

chip_detz_90 

xmsn_oil_hot 

c_box_oi Impress 

hyd _press_l 

hyd_tamp_l 

ac_main 

engl_gov_man 

fire_l _pull 

rpm_rotor_low 

rpm_ngl 

xmsn_oil_byp 



eng2_olI _press 
eng2_chip_detr 
eng2_f uel_f il ter 
dc_gen_2 
c_box_chip_detr 
temp _press_42 
chi p_detr_42 
xmsn_oil _press 
c_box_oil_hot 
hyd _press_2 
hyd_temp_2 
ac_stby 
e n g2_go v_ma n 
fire_2 _pull 
rpm_rotor_high 
rpm_ng2 



Figure 4.1 Segment Symbols Representing Caution Panel 

A partial state description of the aircraft and its 
environment at any given time is defined in terms of 
s ta t e_e 1 emen ts . A list of state elements is a state_l ist . 
State elements are shown in Figure 4.2 
1 . Goal Acquisition 

The problem solver has access to the instruments 
and caution lights and evaluates them in terms of their 
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status, i.e. high, low, erratic etc. Any changes in status 
are flagged as requiring a response. The aircraft's 
instruments are referred to as components. However, a 
component is defined as being any of the symbols listed in 
Figure 4.3. 



state _element = 

landing_zone ( zone_quality) 
automat ic ( component ) 
idle (component ) 
decrease ( component ) 
hot ( component ) 
engaged ( component ) 
fire (component ) 
airspeed(knots ) 
oat( component_status ) 
oil Jbypass i n g_coo 1 er 
left__yaw £uel_obstruction ( component ) 

power (component_status ) fuel _press (component_status ) 
ammet er ( component , component_s tat us ) 
revs( component, component_status) 
oil _press( component, component_status ) 
oll_temp^ component, component_status ) 
torque ^ component, component_status ) 
prepare_for_fa i 1 ure ( component ) 

Itt (component, component_status ) 



ful 1 ( component ) 
metal _particles (component ) 
manual ( component ) 
normal ( component ) 

£ailed( componen t ) 
on (component) 
off ( component ) 
gross_weight (wt_class ) 
altitude ( ft ) 
land( type_landing) 



Figure 4.2 State Elements 

The goals are generated by scanning each caution 
light segment in the master caution panel and each 
instrument, as seen by the pilot. For each caution light 
there is a set of goals. Prior to assertion, the goals are 
checked against all the other goals asserted previously. 
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Duplicates, and goals which are subordinate to previous 
goals (in its class), are not retained. Classes of goals are 
defined by priority sets which list explicitly the relative 
priority of each goal in a given class. If a goal of a 
higher priority has been asserted, no lower priority goals 
will be asserted. Figure 4.4 shows an example of the 
relative priority between power status values. In most cases 
a specific goal belongs to only one class or (set). The 
majority of the priority sets contain only one goal. 



component = 



anci 
c_box 
gen 2 

master_cautlon 

seas 

fuel2 

throttle2 

oil_temp_42 

gear_box_42 

xmsn_oil_temp 

hyd_sys_2 

hyd_temp_2 

ng2 

nfl 

power 



ang2 

enq_oil _press 
govi 

master_arm 

fuel 

fuel _press 
oil_temp_90 
oil _press_42 
c_box_oil_temp 
xmsn_oil _press 
hyd _press 
rotor 
ltt_l 
nf2 

main inverter 



xmsn 

geni 

gov2 

ecu 

fuell 

throttlel 

oil _press_90 

gear_box_90 

c_box_oil _press 

hyd_sys_l 

hyd_temp_l 

ngl 

itt_2 

raln_rmv 

standby_lnverter 



Figure 4.3 Aircraft Component Symbols 



A component 
component_status . One 



is described in terms 
or more of eight 



of 



its 
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possible status 



values may apply to a given component. The goals generated 
by the planner must be free of conflicts. A possible 
conflict exists, for a given component, when two or more 
status values are true at the same time. These status values 
are prioritized by facts in the knowledge base via a 
prioritized statU3_list, which is a list of component status 
symbols. Component status values are shown in Figure 4.4. 



component _status - 

none high low 

increase decrease ok 
erratic respond 

pr ior ity_set ( ( power ( none ) , power ( low) , 

power (decrease ) , power ( increase ) ] ) . 



Figure 4.4 Component Status Values 

At the highest level of abstraction, the goals passed 
to means-ends are merely to respond to a given gauge. The 
state_list is then searched for the specific status of the 
component. The respond status is slightly different from the 
other quantifying and mutually exclusive status labels such 
as low, high etc. For a given component, the status respond 
can co-exist with a high or low component status in the 
current state description. 
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2 . Organizing the Search 



The order in which goals are selected from a goal 
list to be satisfied is driven by the order of the 
recommended facts. The most important goals are placed 
first. If there is more than one recommended operator that 
applies to a given goal then those operators are ordered 
according to the urgency of the operator. An example of such 
recommended facts are shown in Figure 4.5. 

Recommended facts with multiple goals should have the 
goal that is least likely to be satisfied first in its goal 
list. Search time can be reduced by explicitly including 
predicted response groups into the recommended structure. An 
example of this is the confirm_dual_eng_failure operator. 



recommended ( State, [revs(ngl, respond ) , 

revs (ng2, respond ) , off(genl), 

off (gen2) , off(engl), off(eng2), 

land (pract ) 1 , conf I rm_dual_e ng_f allure ) . 

recommended ( State, [torque (engl, respond)], 
con firm_nfl_f allure ) . 

recommended ( State, [torque (engl, respond)] 
chec)(_ngl_over speed ) . 

recommended ( State, [ torque (engl, respond)] 
check_ngl_underspeed) . 



Figure 4.5 Recommended Facts 
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Grouping multiple goals in one recommendation 
reduces the number of times a given operator is invoked 
unnecessarily. However, this should not be a substitute for 
the single goal recommended facts. Single goal recommended 
facts are the finest granularity of the search process. 

The output of this planner is to present the 
operators to the pilot as recommendations to satisfy an 
immediate goal. A list of these operators are referred to as 
an op_list. Operators are shown in Figure 4.6. 



operator = 

norma l_approacfi 

slope_landing 

steep_approach 

high_s pe ed_a ppr oach 

max_we i gh t_land i ng 

sliding_landing 

pract_landing 

pract_landing_outrankedl 

pract_landing_outranked2 

pos_landlngl 

pos_landlng2 

pos_landing_outranked 

autorotation 

check_ngl_over speed 

check_ngl_underspeed 

check _ng2_over speed 

check_ng2_underspeed 

genl_off 

gen2_of f 



master _arm_o£f 

confirm_dual_eng_failure 

confirm_engl_failure 

confi rm_eng2_fa i 1 ure 

engage_scas 

ecu_of f 

raln_rmv_of f 

govl_to_manual 

gov2_to_manual 

govl_to_automa tic 

gov2_t o_a u t oma tic 

confirm_nfl_failure 

confirm_nf2_failure 

throttlel_idle 

throttle2_idle 

check_genl_fa i 1 ure 

check_gen2_f a 1 1 ure 

engl_of f 

eng2_of f 



Figure 4.6 Recommended Operators 
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There are nine different landing profiles and 
emergencies. A landing as a result of a malfunction could be 
described as land as soon as practical, soon as possible, or 
a landing via autorotation. With the exception of an 
autorotation, landings are a function of aircraft wt_class 
or landing zone_guality. Landing profiles and classes are 
shown in Figure 4.7, 



vt_class = 

heavy ; moderate 

zone_guaIity = 

clear ; conrined ; slope 



tvpe_landing - 

pract; pos; auto; 
normal; high_speed; slope/ 
sliding; max_weight; steep 

pr lor ity_set f f land (pos J , land(pract ) I } . 



Figure 4.7 Landing Profiles 

3 . Natops to Code Translation 

The NATOPS manual together with the experience of 
the author played the role of the expert for this system. It 
was necessary to translate the procedures and system 
information contained in the NATOPS manual into a knowledge- 
base. Examples of this translation are now discussed. In 
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each example the indications and corrective action are taken 
from the NATOPS manual. 

The first example, shown in Figure 4.8 describes the 
initial action required by the pilot in the case of a chip 



Caution and warning light - INITIAL ACTION 

Panel wording; CHIP DBTR 

Condition : metal particles in engine 

Corrective Action; Plight idle. Check oil pressure and 
temperature . If normal operate at reduce power. 
If pressure is low and/or temperature is high,, 
shut down respective engine. Land as soon as 
practical . 

This information is coded as follows... 

caution_light ( State, engl_chip_detr ):- 
member (metal _particles (engl) , State ), 
write( " Caution light: engl_ch ip_detr " ),nl, 
secondary^ State, engl_chip_detr ) . 

secondary (State, engl_ch i p_detr ) 

member (oil _press (engl , X ), State ), 
below_l imit (L) , status_member ( X,L) , 
create__goals( [ off (engl) , land (pract) ] ). 

secondary( State , engl_chip_detr ) 

member (oil_temp( engl, high). State ), 
create_goals ( [ of f (engl ), land ( pract ) ] ). 

secondary( State, engl_chip_detr ) 

create_goals ( f idle ( throttlel ), land (pract ) ] ). 



Figure 4.8 Translation Example I 
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detector caution light. By assumption, caution lights and 
instruments do not need to be cross checked. In this example 
there is more than one course of action. Depending on the 
status of the oil pressure and temperature, (secondary 
Indications), different goals are asserted. The goals that 
are created are thus a function of the primary(caution 
light) and secondary indications. The predicate create_goals 
conditionally asserts the goals that are its arguments based 
on goal priority and duplication. 

Figure 4.9 shows the translation of a definition of 
a power turbine governor failure into code. If the immediate 
goal is to respond to the torque of the #1 engine then it 
would be recommended to check the #1 nf governor. If a 
precondition to some operator is that the #1 governor be in 
a failed state, and this has yet to be proven, then the 
second recommended fact would be used. 

The indications of a #1 nf governor failure are 
represented by the preconditions listed in Figure 4.9. If 
the preconditions are true then nothing will be deleted from 
the current state description because nothing has changed. 
Only a diagnosis of the situation has been accomplished. 
Nothing has been done about it at this point. The current 
state description is amended to reflect the fact that the 
governor has failed and the instruments listed in the 
addpostcondition fact have been responded to. 
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Power Turbine Governor (NF) Failure 



Indications . 

1. Erratic GAS PROD RPM (Ng). 

2. Erratic INLET TEMP. 

3. Fluctuating ENG RPM (Nf ) , 

4. abrupt increase in ENG RPM (Nf) above 
governed value. 

5. Abrupt decrease in ENG RPM (Nf) below 
governed value. 

6. Fluctuating TORQUE. 

Procedure . 

1. Affected engine - IDENTIFY 

2. Throttle - ENGINE IDLE. 

3. GOV - MANUAL 

4. Throttle - ADVANCE. 

5. LAND AS SOON AS PRACTICAL. 

This information is coded as follows... 

recommended ( State, Itorque (engl, respond) ] , 
confirm_nfl_failure ) . 

recommended ( State, [ failed (govl) } , 
confirm_n£l_£ailure ) . 

precondi tion ( State, con£irm_n£l_£ailure, 
[revs(ngl, erratic) , itt( engl, erratic) , 
revs (n£l, erratic) , torque (engl, erratic) , 
automat ic (govl ) J ) 

deletepostcondition( State, 

con£irm_n£l_£ailure, [ ] ) . 

addpostcondition ( con£irm_n£l_£ailure , 

(revs (ngl, respond) , revs(n£l,respond) , 
failed ( govl ) , torque ( engl, respond ) 1 ) . 



Figure 4.9 Translation Example II 
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The third example, a single engine failure, is shown 
in Figure 4.10. When an engine failure occurs the rotor 
speed decreases somewhat due to loss of power. This creates 
the goal revs^rotor, respond). One of the recommended 
operators for this goal is con£irm_engl_fallure. If all of 
the preconditions have been meet, the current state 
description will be altered by rhe addition and deletion or 
facts as shown. 
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Single Engine Failure (In Flight). 

When one engine fails, rotor speed can be expected 
to droop. The desired rotor rpm can be regained if 
sufficient power is available, by using the engine 
RPM switcn. After rpm is regained by use of the RPM 
switch, desired rotor rpm can be maintained by the 
collective control. 

INDICATIONS . 

1. Left yaw 

2. RPM caution light (gas producer) 

3. MASTER CAUTION light 

4. Rotor rpm decrease 

5. Engine instruments decrease 

{ engine_instruments } 

5. CAUTION panel lights 

This information is coded as follows... 

recommended ( State, 

f revs ( rotor ^respond ) J , conf irm_engl_failure ) . 

precondition ( State, conf lrm_engl_fal lure, 

[ torque (engl^ none ) , torque (xmsn, low) , 
revs (ngl, none), revs (nfl, none ) , 
oil _press (engl, none ) , f ailed ( genl ) , 
i tt ( engl, none ) , le£t_yaw, on( fuell ) , 
fulK throttlel ) , revs ( rotor , low) J ) . 

deletepostcondition ( State, conf irm_engl_fai lure, 
[on(ecu ) ] ) . 

addpostcondition ( confirm_engl_failure, 

[ of f (ecu ), failed (engl ) , revs (ngl, respond ) , 
revs ( nfl, respond) , revs (rotor , respond ) , 
itt( engl , respond ) , torque (engl, respond ) , 
torque ( xmsn, respond ) J ) . 



Figure 4.10 Translation Example III 
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V. ANALYSIS AND CONCLUSIONS 



A. ANALYSIS 

A version of the planner was tested to determine the 
execution time of the various test cases. Only the 
intermediate write statements, included in the source code 
in appendix D, were left out. These times are interesting 
because they give some relative measurement to the costs of 
the various aspects of the planner. The response times for 
each test are shown in Figure 5.1. 

Detailed output listings of tests 2, 3, and 4, can be 

found in appendices A, B, and C respectfully. 



TEST 1 


TIME 




EMERGENCY 


1 


0.39 


sec • 


none 


2 


1.82 


sec . 


dual engine failure 


3 


1.92 


sec . 


engine #1 failure 


4 


2.53 


sec . 


engine 01 failure and 
#2 Nf governor failure 



Figure 5.1 Test Case Response Tiroes 
1. Test 1 

This test involved no goals. It did provide the 
amount of time necessary to scan the current state 
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description. The base time of 0.39 sec. as reflected by test 
#1 is also significant because this determines the sampling 
rate of the planner. The state description then could be 
sampled approx. 150 times per minute. The longest reaction 
time is experienced when a component failure occurs 
immediately after a sampling of the current state 

description. This means as much as 0.8 sec. could elapse 
before a response condition would be acted upon by the 
planner . 

2 . Test 2 

In test #2 only four operators are considered and 
all four were applicable. Figure 5.2 shows, through 

indentation, the nesting levels for each operator invoked. 
Backtracking occurs when the indentation is reversed, 
and no backtracking occurs in this example. This is the 
optimum situation. Here the planner is telling the pilot 
that it has confirmed a dual engine failure and an 
autorotation is to be accomplished. 

3. Test 3. 

In this case, 11 operators were tried with 5 being 
applicable. Figure 5.2 depicts the backtracking that occurs 
as a result of some recommended operators failing to satisfy 
immediate goals. It should be pointed out that two of the 
operators, confirn_eng2_failure and check _gen2_f allure, were 
attempted twice. The pilot in this case is Informed that the 
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TEST II 



-no recommended operators- 

TEST #2 

confi rm_dua 1 _-?n g_ f a i i ur a 
pract_Iandlnq_outzankedl 
pos_landing_oatzankad 
autorotation 



TEST 13 

con£irm_ang2_fa i lure 
check_gen2_failura 
confizzi_engl_za liar a 
angl_off 
genl_of£ 

pract_landing_outrankedl 
pos_landinq_out ranked 
aucorotation 
conf irm_eng2_f ai lure 
check_gen2_£ai lure 
pos_landing 



TEST 14 

conf irm_eng2_fai lure 
check_gen2_f allure 
conf irm_engl_fai lure 
conf irm_nf2_f allure 
engl_of f 
genl_off 

pract_landlng_outrankedl 
pos_landing_out ranked 
autorotation 
conf irm_eng2_f allure 
check_gen2_failure 
pos_landing 



Figure 5.2 Recommended Operator Selection 
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to secure the II engine and generator 



II engine has tailed, 
and to land as soon as possible. 

4 . Test 4 . 

Here 12 operators were selected with 6 being 
applicable. Again, two of the operators, 

con£irm_eng2_£ailuze and checic_gen2_failure, were attempted 
twice. In addition to the information presented to the pilot 
in test 3, the pilot is Informed that the #2 nf-governor has 
failed. 

Governor failures are not as straightforward to 
diagnose as engine failures. As a result this information is 
potentially more valuable. 

5. groaramming Language 

Turbo Prolog is noc considered to be a Clocksin and 

Hellish PROLOG as most others are (Ref. 13 p.3341. The first 

major difference between Turbo Prolog and other 
implementations is the required use of Pascal-like type 
definitions for parameters. This has the advantage of 
catching various errors at compile time, and also allows the 
compiler to generate more efficient code. The drawback is 
that describing generalized procedures can sometimes result 
in multiple definitions of a rule to handle different types 
of variables. An example of this was the member predicate. 
As defined, it could accept as arguments a state_element and 
a state_llst. However, when this predicate was needed to be 
used with arguments of type component_status and status_llst 
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respectfully, a separate definition of the member predicate 
had to be defined named '*status_member** . The Pascal-like 
syntax was more of a help than a hindrance and greatly 
helped in the debugging process. 

B. CONCLUSIONS 

Turbo Prolog proved to be suitable for this purpose and 
the timing results were encouraging. Useful information was 
rapidly presented in the form of diagnosis and recommended 
actions . 

Means-ends proved to be effective because the structure 
of the task was well suited to the data structure or the 
recommended facts. The amount of information processing 
required to satisfy the various intermediate goals is 
reflected by the number of recommended operators considered 
in satisfying the immediate goals. All of the facts in the 
knowledge-base were not utilized by the examples exercised 
in this implementation. 

Translation from the NATOPS manual into a knowledge-base 
was straightforward and easily verified. In employing 
multiple knowledge-base sets, correctness and speed of 
execution can be maintained. 

It is conceivable that this system could be used in 
place of the existing master caution panel which displays 
caution light information only. Perhaps a digital display 
that presents graphically, as well as textually, the 
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operators and actions to be taken. In this way no extra 
space would need to be provided for this system in the 
cockpit. This makes this feasible for use in existing 
aircraft . 

For total aircraft system implementation, the number of 
operators required is dependent on the granularity of 
information provided to the pilot. Higher levels of 
abstraction are required for immediate actions, with more 
detailed instructions provided at the request of the pilot. 
Different help levels could be provided by switching to a 
specialized knowledge-base. This implies an interactive 
capability by the pilot to select goals, and a means to do 
so would need to be provided. 

The inflight emergency domain requires as a minimum the 
following domains: Takeoff, Low altitude. High altitude. 
Night, and perhaps instrument conditions. 

This system potentially lends itself to practically any 
application within the aircraft. The task of piloting an 
aircraft is very well defined and procedurized and could 
possibly be expanded into the realm of normal procedures as 
well as emergency procedures. 

C. RECOMMENDATIONS 

It is recommended that a full implementation be built to 
determine the number of knowledge-base sets needed and the 
scope of each. 



40 



APPENDIX A 

DUAL ENGINE FAILURE EXECUTION 



Caution 

Caution 

Caution 

Caution 

Caution 

Caution 

Caution 



light: engl_oil_press 
light: eng2_oil_press 
light: dc_gen_l 
light: dc_gen_2 
light: rpm_rotor _low 
light: r?m_ngl 
light: rpm_ng2 



Goal list is: { revs ( nq2 , respond ) , revs ( ngl , respond ) , 
revs (rotor , respond ' , otr(gen2), off(genl), of£(eng2), 
land(pract), o££(enql)] 



dirferance: Crevs(nq2rrespond) , revs ( ngl , respond ) , 
revs ( rotor , respond ) , of£(qen2), o££(qenl), o££(enq2), 
land(pract), o££(angl)] 






current operator: con£irm_dual_eng_failure depth is: 1 

'k'k^'k'kic'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'k'kiiic'k'k'k'kii'kiii'kic 



operator preconditions have been met 
items being deleted are: (on(ecu) ] 

items being added are: [o££(ecu)^ £ailed(engl ) , 

failed (eng2 ) ^ o££(genl), o££(gen2), o££(engl), o££(eng2), 
revs (ngl, respond ) , revs ( nfl, respond ) , revs(rotor, respond) , 
itt(engl,respond) , itt(eng2,respond) , revs ( ng2, respond ) , 
revs(nf 2, respond) ] 

Goal list is: [revs(ng2, respond) , revs ( ngl, respond ) , 

revs ( rotor , respond ) , off(gen2), off(genl), off(eng2), 

land(pract), o££(engl)] 

difference: ( land ( pract ) ] 
*********************************************** 

current operator: pract_landing_outrankedl depth is: 2 
*********************************************** 
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Goal list is: (land(pos)] 
difference: [land(pos)] 

*********************************************** 

current operator: pos_landing_outranked depth is: 3 
*********************************************** 

Goal list is: [land(auto)] 

difference: [land(auto)] 
*********************************************** 

current operator; autorotation depth is: 4 

operator preconditions have been met 

items being deleted are: { f ull ( thr ottlel ) , full ( throttle! ) , 

airspeed ( 100 ) , ait itude ( 1000 ) , revs ( rotor , respond ) 3 

items being added are: [ idle ( throttlel ) , idle ( throttle! ) , 

airspeed(O), altitude(O), revs ( rotor , respond ), land (auto ) ] 

operator preconditions have been met 

items being deleted are: [] 

items being added are: (land(pos)] 

operator preconditions have been met 

items being deleted are: [] 

items being added are: ( land ( pract ) ] 

operator preconditions have been met 

The recommended operators are: ( conf irm_dual_eng_failure, 

autorotation, pos_landing_outranked, 

pract_landing_outrankedl 1 

The final state description is: Ioil_press(engl,none) , 

oiljpress(eng2,none), revs ( rotor , low) , of f ( rain_rmv) , 

of f (master_arm) , land ing_zone( clear ) , full ( throttlel ) , 
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full ( throttle2 ) , 
automat lc(gov2 ) , 
torque (engl, none ) , 
revs ( ngl, none ) , 
revs (nf 2, none ) , 
failed(genl) , fai 
oil_temp( c_box,ok ) 
oi Impress ( xmsn, ok ) 
fuel jpress ( ok ) , 
oi l_press ( hyd_sys_: 
airspeed ( 100 ) , alt 



of f (master_caut ion) , 
on(fuell), on(fuel2), 
torque (eng2, none ) , 
revs ( ng2, none ) , 
oil_temp( engl, ok ) , 
led(gen2), full(fuel), 
, oil_press(c_box,ok) , 
, ammeter (genl, none ) , 
itt(engl,none) , 



automat ic(govl ) 
normal ( f uel_press ) 
torque ( xmsn, low) 
revs ( nf 1, none ) 
oil_temp(eng2,ok ) 
off(scas), on(ecu) 
oil _temp( xmsn, ok ) 
ammeter (gen2,none) 
itt (eng2,none ) 



l,ok ) , 

itude ( 1000 ) , 



oil_press ( hyd_sys_2, ok ) 
lef t_yaw] 



r 

r 

/ 

/ 

¥ 

¥ 



¥ 

¥ 

¥ 
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APPENDIX B 



SINGLE ENGINE FAILURE EXECUTION 



Caution light: engl_oil_press 
Caution light: dc_gen_l 
Caution light: rpm_rotor_low 
Caution light: rpm_ngl 

Goal list is: [ revs ( ngl, respond ) , revs ( rotor , respond ) , 

off(genl), land(pract), o££(engl) 1 

di££erence: [revs(ngl, respond) , revs(rotor, respond) , 

o£f(genl), land(pract), o£f(engl)l 

*********************************************** 
current operator: con£irm_eng2_£ailure depth is: 1 

*******************5C*************************** 

Goal list is: ( torque ( eng2, none ) , torque ( xmsn, low) , 

revs (ng2, none ) , revs (n£2, none ) , oil_press(eng2,none) , 

tailed ( gen2 ) , itt(eng2,none) , le£t__yaw, on(£uel2), 

full ( throttle2 ) , revs (rotor , low) 1 

difference: (torque(eng2,none) , revs ( ng2, none ) , 

revs ( nf 2, none ) , oil_press(eng2,none) , failed (gen2 ) , 

itt (eng2, none ) ] 

*********************************************** 

current operator: check_gen2_failure depth is: 2 
*********************************************** 

Goal list is: [ on ( gen2 ), ammeter (eng2, none) 1 

difference: [ on ( gen2 ), ammeter (eng2, none ) 1 

*********************************************** 

current operator: conf irm_engl_failure depth is: 1 
*********************************************** 

operator preconditions have been met 
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items being deleted are: (on(ecu) ] 

items being added are: (o££(ecu), £ailed(engl) , 

revs (ngl, respond ) , revs(n£l, respond ) , revs (rotor, respond ) , 
ltt(engl, respond ) , torque (engl, respond ) , 

torque ( xmsn , respond ) ] 

Goal list is: ( revs (ngl, respond), revs(rotor, respond), 

o££(genl), land(pract), o££(engl)) 

dif£erence: (otf (geni) ,land(pract) ,o£f (engl) ] 

current operator: engl_o£f depth is: 2 

****'*'**5r*»***at**st*x«**»*»**»»*atitat**aatr»a:«**a[<*»* 

operator preconditions have been met 
items being deiecsd are: £on(enqi)) 
items being added are: £o££(engi)] 

Goal list is: { revs (ngi, respond ) , revs < rotor , respond ) , 

ot£(genl), land(pract), o£f(engl)j 

di££erence: (o££(genl), land(pract) ) 

************************************** 4 (******** 

current operator: genl_o££ depth is: 3 
*********************************************** 

operator preconditions have been met 
items being deleted are: (on(genl)l 
items being added are: (o££(genl)l 

Goal list is: ( revs (ngl, respond ) , revs (rotor, respond ) , 

o££(genl), land(pract), o££(engl)l 

difference: (land(pract) ) 
*********************************************** 

current operator: pract_landing_outranlcedl depth is: 4 
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'kit’kit'kit'k'k'k'k'k'k'k'k'k'k'k'k'k'kic'k'k'kicitit'k'kitit'k'kilieicitit'kisicicicidcici: 

Goal list is; (land(pos)] 
difference: (land(pos)] 

*********************************************** 

current operator: pos_land lng_outranked depth is: 5 
*********************************************** 

Goal list is; tland(auto)] 

difference: [land(auto)] 

*********************************************** 

current operator; autorotation depth is: 5 

Goal list is: [ failed ( engl ), failed ( eng2 ) ] 

difference: C failed(eng2 5 1 

current operator: conf irm_eng2_failure depth is: 7 
*********************************************** 

Goal list is: [ torque(eng2,none) , torque ( xmsn, low) , 

revs ( ng2, none ) , revs ( nf 2, none ) , oil_press (eng2,none ) , 

failed(gen2) , itt(eng2,none) , left_yaw, on(fuel2), 

f ull ( throttle2 ) , revs (rotor, low) ] 

difference: (torque(eng2,none) , revs(ng2,none) , 

revs(nf 2,none) , oil_press(eng2,none ) , failed(gen2 ) , 

itt (eng2, none ) J 

*********************************************** 

current operator; check_gen2_failure depth is: 8 
*********************************************** 

Goal list is: t on( gen2 ), ammeter (eng2, none ) ] 
difference : ( on( gen2 ) , ammeter ( eng 2, none ) ] 
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*********************************************** 



current operator: pos_landingl depth is: 5 
*********************************************** 

operator preconditions have been met 
items being deleted are: (altitude( 1000) ,airspeed( 100) ] 
items being added are: Cland(pos)/altitude<0),airspeed(0) 1 
operator preconditions have been met 
items being deleted are: [] 
items being added are: ( land(pract ) ] 
operator preconditions have been met 



The recommended operators are: {con£irm_engl_failure 

engl_off, genl_off, pos_landingl, pract_landing_outrankedl ) 



The final state description is: I oil_press(engi,none) 
oil _press(eng2,ok ), revs (rotor, low) , off ( rain_rmv) 
off (master_arm) , landing_zone (clear ) , f ull ( throttlel ) 
full (throttle2 ) , of f (roaster_caution ) , automatic ( govl ) 
automat ic(gov2 ) , on(fuell), on(fuel2), normal ( fuel _pr ess ) 
torgue(engl,none ) , torque (eng2, ok ) , torque ( xrosn, low) 
revs (ngl, none), revs(ng2,ok ) , revs (nfl, none ) , revs(nf2,ok) 
oil_temp(engl,ok), oil_temp(eng2,ok) , failed(genl) 
full(fuel), off(scas), on(ecu), oil_temp(c_box,ok) 
oil_press(c_box,ok ), oil_terap(xmsn, ok ) , oil_press( xrosn, ok) 
ammeter (genl, none ) , ammeter (gen2, ok ) , fueljpress(ok) 
itt (engl,none ) , itt (eng2, ok ) , oil_press(hyd_sys_l,ok) 
oil_press ( hyd_sys_2,ok ) , airspeed( 100) , altitude( 1000 ) 
left_yawj 



/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 
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APPBWDIX C 



SINGLE ENGINE FAILURE / NP GOVERNOR FAILURE EXECUTION 



revs(ng2, erratic) 

revs(nf2, erratic) 

torque(eng2^ erratic) 

torque (xmsn, erratic) 

Caution light: engl_oil_press 
Caution light: dc_gen_l 
Caution light: rpra_rotor_low 
Caution light: rpm_ngl 

Goal list is: [ revs ( ngl, respond ) ^ revs < rotor ^ respond ) , 

o££(genl), Iand<pract)^ o££(engl), torque ( xmsn, respond ) , 
torque (eng2, respond ) , revs (n£2, respond ) , rsvs(ng2, respond) ] 

difference: { revs ( ngl, respond ) , revs ( rotor , respond ) , 

o££(genl), land(pract), of£(engl), torque ( xmsn, respond ) , 
torque (eng2, respond) , revs ( n£2, respond ) , re vs ( ng2, respond ) ) 

*********************************************** 

current operator: conf lrm_eng2_fallure depth is: 1 
*********************************************** 

Goal list is: ( torque(eng2,none) , torque ( xrosn, low) , 

revs ( ng2, none ) , revs(n£2,none), oil_press(eng2,none ) , 

£ai led<gen2 ) , itt (eng2, none ) , le£t_yaw, on(£uel2), 

full (throttle2 ) , revs(rotor,low) ) 

difference: ( torque(eng2,none), revs (ng2, none ) , 

revs (n£2, none), oll_press(eng2,none), £ailed(gen2) , 

itt (eng2, none ) ) 

*********************************************** 
current operator: check_gen2_fallure depth is: 2 

fsicfcitlicfclicicicicitit'kic'kiiciticfcic'kiic'kiciciclicfclic'kfcfcfcliclicfclic'kiicfrk’k'kfrkfrk 

Goal list is: (on(gen2) , ammeter (eng2, none) ) 
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difference : ton(gen2) ,ammeter(eng2,none ) 1 
*********************************************** 

current operator: conf irm_engl_failure depth is: 1 
************************************************* 

operator preconditions have been met 
items being deleted are: ion(ecu)] 

items being added are: [off (ecu), failed ( sngl ) , 

revs ( ngl , respond ) , revs (nfl, respond ) , revs ( rotor , respond ) , 
itt(engl, respond) , torque ( e ngl , respond ) , 

torque ( xmsn, respond ) ] 

Goal list is: [revs(ngl, respond) , revs (rotor , respond ) , 

off(gani), land(pract), off(angi), torque ( xmsn , respond ) , 
torque(eng2, respond) , revs(nr2, respond) , revs ( ng2 , respond ) ] 

difference: (off(geni), land(pract), off(enqi), 

torque ( eng2 , respond ) , revs (nf 2 , respond ) , revs ( ng2 , respond ) ] 

current operator: conf irm_nf 2_failure depth is: 2 

********:ilf************************************** 

operator preconditions have been met 
items being deleted are: [] 

items being added are: C revs (ng2, respond ) , 

revs ( nf 2, respond ) , failed( gov2 ) , torque ( eng2, respond ) ] 

Goal list is: [revs(ngl, respond) , revs ( rotor , respond ) , 

off(genl), land(pract), off(engl), torque ( xmsn, respond ) , 
torque (eng2, respond ) , revs (nf 2, respond ) , revs ( ng2, respond ) ] 

difference : (of f (genl ) , land ( pract ) ,of f ( engl) 1 
*********************************************** 

current operator: engl_off depth is: 3 
*********************************************** 

operator preconditions have been met 
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Items being deleted are: (on<engl)] 
items being added are: (o££(engl)) 

Goal list is: [ revs ( ngl, respond > , revs (rotor, respond ) , 

o££(genl), land(pract), of£(engl), torque ( xmsn, respond ) , 
torque (eng2, respond ) , revs(n£2, respond) , revs (ng2, respond) 1 

difference : { off (genl ) , land ( pract ) ] 

***«********«*aa*:t***«a»»*«*****T!it*w****:t*»*«5l(a* 

current operator: genl_off deprh is: 4 

************!t**:********:**llt*:***4r*^*:k**:**C»***:^c*:^f 

operator preconditions have been met 
items being deleted are: fon(geni)) 

items being added are: (off (genl)] 

Goal list is: t revs ( ngl , respond ) , revs (rotor, respond ) , 

oif(genl), land(pracr), o£f(engi), torque (xmsn, respond ) , 
torque ( eng2 , respond ) , revs ( n£2 , respond > , revs ( ng2 , respond ) ] 

difference: (land(pract) ] 

a********************************************** 

current operator: pract_landing_outrankedl depth is: 5 
*********************************************** 

Goal list is: (land(pos)l 
difference: (land(pos)l 

*********************************************** 

current operator: pos_landing_outranked depth is: 6 
*********************************************** 

Goal list is: (land(auto)l 
difference: (land(auto)] 
*********************************************** 
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current operator: autorotation depth is: 7 

**:Hr*4r*****:»*!l^***** ***************************** 

Goal list is: ( failed(engl) , £ailed(eng2 ) 1 

difference: [falled(eng2 ) ) 
*********************************************** 

current operator: conf irm_eng2_failure depth is: 8 
*********************************************** 

Goal list is: { torque (eng2^ none ) ^ torque < xmsn, low) , 

revs (ng2^ none ) ^ revs ( nf 2, none ) , oil_press(eng2,none ) , 

failed ( gen2 ) , itt (eng2,none ) , left_yaw, on(fuel2)^ 

full ( throttle2 > , revs ( rotor , low) J 

difference: I torque (eng2, none) , revs ( ng2 , none ) , 

revs ( nf 2 , none ) , oil_press (eng2, none ) / failed(gen2 ) , 

itt(eng2,none) 1 

current operator: check_gen2_failure depth is: 9 

*********************************************** 

Goal list is: [on(gen2)^ainineter(eng2,none) ] 
difference: lon(gen2),ammeter(eng2,none) ) 
*********************************************** 

current operator: pos_landingl depth is: 6 
*********************************************** 

operator preconditions have been met 
items being deleted are: Caltitude(lOOO) ^airspeed(lOO) ) 
items being added are: t land (pos ), altitude ( 0 ) ^airspeed ( 0 ) 1 
operator preconditions have been met 
items being deleted are: 11 
items being added are: ( land(pract ) 1 
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operator preconditions have been met 



The recommended operators are: [ conf irm_engl_fai lure , 
conf irm_nf 2_failure, engl_off, genl_off/ pos_landingl, 
pract_landing_outrankedl ] 



The final state description is: I oil_press (engl, none ) , 
oil_press (eng2, ok ) , revs ( rotor , low) , of f ( rain_rmv ) , 
of f (master_arm) , landing_zone (clear ) , f ull ( throttlel ) , 
f ull ( throttle2 ) , of f (master_caution) , automat ic (govl ) , 
automatic ( gov2 ) , on(fuell), on(fuel2), normal ( fuel_press ) , 
torque (engl, none ) , torque ( eng2 , erratic ) , torque ( xmsn, low) , 
torque (xmsn, erratic) , revs ( ngl, none ) , revs(ng2, erratic) , 
revs ( nfl, none ) , revs (nf 2, erratic ) , oil_temp(engl,ok ) , 
oil_temp( eng2,ok), failed(genl) , full(fuel), off(scas), 
on(ecu), oil_temp(c_box,ok ) , oil_press(c_box,ok ) , 
oil_temp(xmsn,ok ) , oil_press (xmsn, ok ) , ammeter ( genl , none ) , 
ammeter ( gen2 , ok ) , fuel_press(ok) , i tt ( engl , none ) , 
itt ( eng2, errat ic ) , oi l_press ( hyd_sys_l, ok ) , 
oil_press(hyd_sys_2,ok ) , airspeed ( 100 ) , alt itude ( 1000 ) , 
lef t_yawl 
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APPENDIX D 



SOURCE CODE LISTING 



nowarnlngs 
code = 3500 
trail - 100 

/*:******sr#*****:**-*^t5ir«*** DOMAINS ********A***5*t***5t^******* / 
domains 

/* The domains section contains the declarations of the 
types and symbols used in this program 
*/ 

/* The caution panel cluster is represented by cerms each 
corresponding to a single liaht in the aircraft 

*/ 



segment = 

engi_oil_prass ; 
engi_chip_detr ; 
engi_fuel_f liter ; 
dc_gen_l ; 
xmsn_chip_detr ; 
temp_press_90; 
chip_detr_90; 
xmsn_oil_hot; 
c_box_oil jpress ; 
hyd_press_l ; 
hyd_temp_l; 
ac_main; 
engl_gov_man; 

£ lre_l_pul 1; 

rpm_rotor_low; 

rpm_ngl; 



eng2_oil_press ; 
eng2 _chip_detr ; 
ang2_fuel_f liter ; 
dc_gen_2 ; 
c_box_chip_detr ; 
temp_press_42; 
chip_detr_42; 

xmsn_oi l_press; xmsn_oi l_byp; 

c_box_oil_hot ; 

hyd_press_2 ; 

hyd_temp_2 ; 

ac_stby ; 

eng2_gov_man; 

£ lre_2_pull ; 

rpm_rotor_high; 

rpm_ng2 



segment_list = segment* 



/* 

Alrcra£t weight and landing zone quality are represented 
by the £ollow- Ing declarations, with respect to the scope 
o£ this implementation the weight can be one o£ two types 
and the zone quality can be one o£ three values. The nine 
di££erent landing pro£iles and ergencies. A landing as a 
result o£ a mal£unctlon could be described as land as soon 
as practical, soon as possible, or a landing via 
autorotation. Pro£lles can can be normal, high speed, 
sliding, steep, aircra£t at max weight, or a landing to a 
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sloped zone. 

*/ 

wt_class = 

heavy ; moderate 

zone_quality = 

clear ; confined ; slope 



type_landing = 

pract; pos; auto; 
normal; high_speed; slope; 
sliding; nvax_weight; steep 



/* 

A component is defined as being any of the below listed 
names. Some of these components were not utilized in the 
knowledge base. 

component = 

engl eng 2 ; xmsn ; c_oox ; 

anq_o i 1 _press : 
genl ; gen2 ; govl ; gov2 ; 
master _caucion ; mascer^arm ; 
ecu ; seas ; 

fuel ; cueil ; £uel2 ; fuel_prass ; 
irhrott lei ; throttle 2 ; 
oil_temp_90 ; oil_press_90 ; 
oil_temp_42 ; oil_press_42 ; 
gear_box_90 ; gear_box_42 ; 
c_box_oil_press; c_box_oil_temp; 
xmsn_oil_temp; xmsn_oil_press ; 
hyd_sys_l ; hyd_sys_2 ; hyd_press; 
hyd_temp_l ; hyd_temp_2 ; 
rotor ; ngl ; ng2 ; itt_l ; itt_2 ; 
nfl ; nf2 ; rain_rmv ; power ; 
main_inverter ; standby_inverter 

/* The aircraft's guages and instruments as seen by the 
pilot are refered to as components. A component has eight 
status values and are prioritized by a fact in the 
knowledge base. A given component may have more than one 
status true at any given time. For instance eng torque could 
be both *ok* and 'decrease* simultaniously . 

*/ 

component_status = 

none ; high ; low ; 
increase ; decrease ; 
ok ; erratic ; respond 



/* 

A status list is a list of component status values. This 



54 



list established the priority of the status values 
*/ 

status_list = component_status* 

/* Some components are described as being in one of the 
following two modes. Each is mutually exclusive 
*/ 

manual, 

automatic = mode 



/* A partial state description of the aircraft and it's 
environment at any given time is defined in terms of the 
following state elements. 

*/ 



state_element = 

prepare_f or_f ailure ( component ) ; power ( component_status ) ; 



ful 1 ( component ) ; 
metal_particles ( component ) ; 
fuel_press ( component_status ) ; 
manual ( component ) ; 
normal ( component ) ; 
failed ( component ) ; 
on(component ) ; 
off ( component ) ; 
gross_weight ( wt_class ) ; 
altitude ( f t ) ; 
land( type_landing) ; 
itt ( component, component_status ) ; lef t_yaw; 
ammeter ( component, component_status ) ; 
revs( component, component_status ) ; 
oil_press( component, component_status ) ; 
oil_temp( component, component_status ); 
torque ( component, component_status ) 



landing_zone ( zone_quality) ; 

f uel_obstruction ( component ) ; 

automatic ( component ) ; 

idle ( component ) ; 

decrease ( component ) ; 

hot (component ) ; 

engaged ( component ) ; 

f ire ( component ) ; 

a irspeed ( knots ) ; 

oat (component_status ) ; 

o i l_bypass ing_cooler ; 



state list = state element* 



/* Actions to be taken by the pilot or some 
must be taken to satisfy an immediate goal, 
of this planner is to present the operators 
as a possible diagnosis of the present state 
list of these operators are refered to as an 
*/ 



action which 
The objective 
to the pilot 
of affairs. A 
op_l ist . 



operator = 

normal_approach ; slope_landing ; steep_approach ; 
high_speed_approach ; max_weight_landing ; sliding_landing; 
pract_landing; pract_landi ng_out ranked 1; 
pract_landing_out ranked 2; pos_landingl; pos_landing2; 
autorotation;confirm_engl_f ailure; confirm_eng2_f ailure; 
engage_scas ; ecu_off ; rain_rmv_off ; master_arm_of f ; 
govl_to_manual ;govl_to_automatic; conf irm_nfl_f ailure; 
check_ngl_overspeed ; check_ngl_underspeed ; gov2_to_manual ; 
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gov2_to_automatlc ;con£lrm_n£2_£ailure;check_ng2_overspeed; 
check_ng2_underspeed ; throttlel_idle ; throttle2_ldle; 
con£irm_dual_eng_£ailure ; check_genl_£allure ; 
check_gen2_failure;genl_o££; gen2_o££; engl_o££; eng2_o££; 
pos_landing_outranked 

op_list = operator* 

/*********************** database ************************/ 

database 

/* The database is contains only one fact and that is the 
list of goals that are asserted by scanning the caution 

lights and the instrument panel. The database is only 
active during this process and the fact temp_goals is 
retracted prior to calling means_ends_analysis . 

*/ 

terap_goals (state_list) 



nest_level, 

percent, ft, degrees, amps, 
lbs, knots, oat, value 
= integer 
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/*********************** predicates ***********************/ 
predicates 



problem_solver 



state_list, op_list,state_list ) 



/* predicates used directly in the means ends analysis 
procedure 
*/ 



means_ends 

recommended 
precondition 
addpost condition 
deletepostcondit 



( state_list,state_list,op_list, 
state_l ist , nest_level ) 

( state_list, state_list, operator 
( state_list, operator, state_list 
( operator, state_list ) 
ion ( state_list, operator, state_list 



) 

) 

) 



/* predicates used to scan the cockpit for goals 
*/ 



check_lights 
check_guaqes 
check_revs 
check _pr assures 
check_tsmps 
check_torque 



( state_list, state_list ) 
( 3tace_list ) 

( state_list ) 

( 3tata_list ) 

( state_iist ) 

( state list ) 



>nasx:er_caut ion 
caut ion_l ighc 
secondary 



( 3tate_list, 3tax:a_li3t ) 
{ 3tate_iist, segment ) 

( state_lisr, segment) 



create_goals ( state_list ) 

ck_duplicate ( state_element , state_list ) 

pick_pr ior ity_set ( state_element , state_list ) 
priority_set ( state_list ) 

append_best_goal ( state_list, state_element ) 



below_l imit 
changed 
update 
scan_pane 1 
segment_panel 



( status_list ) 

( status_list ) 

( state_list ) 

( segment_l ist , state_list ) 
( segment_list ) 



/* utilities 
*/ 

deleteitems 
de lete 
state_list ) 
union 
append 
difference 
subset 
member 
member 2 



( state_list, state_list, state_list ) 
( state_element , state_list, 

( state_list, state_list, state_list ) 
( op_list, op_list, op_list ) 

( state_list, state_list, state_list ) 
( state_list, state_list ) 

( statc_clement , state_list ) 

( state_e lament , state_list ) 
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s t a t US _me mbe r 

/* test cases 
*/ 

testl 
test 2 
testa 
test 4 



( coroponent_status, status_list ) 



( op_list,state_list ) 
( op_list,state_list ) 
( op_list ,state_list ) 
( op_list,state_list ) 
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yhlfkltifkltlclcitltleltlcleitleitle**** CLAUSES ***********************/ 



I uses 



/* Problem_solver is the top level predicate from which all 
other predicates are called. The goals are initialized to 

empty. The guages are first searched for components in 

need of some type of response. Then the caution lights are 

searched. Once the goals have been asserted means_ends is 
called to present the operators necessary to solve the 

problem. 

*/ 

pr oblem_solver ( State, Oplist,Goalstate ):- 

asserta ( temp_goals (11)), 
check_guages ( State ), 
check_lights ( State, Goal_list) , ! , 
means_ends( State, Goal_list, Oplist, 
Goalstate , 1 ) , ! . 

/* This recursive procedure has two rules. The first is a 
single basis step, which in effect says stop with any 

state that includes all the goal facts. The second rule 
is the induction step which has two re- cursive calls; the 
first for the preconditions, the second for the 
postconditions. A list of facts is computed that are 
different between the current state and the goal. The 

recommended facts are searched in order to find one whose 
goal is a subset of the goal list. If so then retrieve the 
preconditions of the operator, and recursively call means 
ends to resolve the differences. Once the preconditions 

have been satisfied the deletepostcondit ion facts are 
deleted from the final state resulting from the precondition 
recursion. Then the addpostcondit ion facts are retrieved and 
added to the state. This determines the state after the 
operator application. This process is done recursively 
until all preconditions have been satisfied. The final 
operator list for the whole problem is the appending 

together of the precondition-recursion operator list, the 
recommended operator, and the postcondition operator list. 

*/ 

means_ends( State, Goal_list, (1, State, N ) ;- 

difference( Goal_list, State, [] ), 
wr ite ( "operator preconditions have been met"), 
nl, nl . 

means_ends( State, Goal_list, Oplist, Goalstate, N ) :- 

difference( Goal_list, State, D ), 
writeC'Goal list is: ",Goal_list ) ,nl,nl, 
wr i te ( "d i f f erence :",D),nl,nl, 
recommended( State, Dsub, Operator ), 
subset( Dsub, D ), 
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wr i te ( **************************************” ) f 
nl, nl, 

write ( "current operator; ", Operator), 
write(" depth is: ", N ),nl,nl, 
wr ite( ”************************************” ) ^ 
nl,nl, 

precondition( State, Operator, Prelist ), 

N2 = N + 1, 

means_ends( State, Prelist, Preoplist, 
Prestate, N2 ), 

deletepostcondition( State, Operator, 

Deletepostl ist ), 
deleteitems( Deletepostlist , Prestate, 
Prestate2 ), 

write ("items being deleted are: ", 
Deletepostlist) ,nl,nl, 
addpostcondition( Operator, Addpostlist ), 
write ("items being added are; ", 

Addpostlist) ,nl,nl, 

union( Addpostlist, Prestate2, Postlist ), 
means_ends (Postlist , Goal_list, Postoplist, 
Goalstate, N2 ), 

append( Preoplist, ( Operator I Postoplist ], 
Opl ist ) , I . 

/* 'create goals' is a control structure that provides a 
way to generate goals from within the program. Before 
goals are appended to the goal list, they are checked 
against other goals in the same class to eliminate the 
appending of duplicates. Each class is a list of prioritized 
state elements. If a goal of a higher priority has already 
been appended then the goal under con- sideration will not 
be appended. create_goals looks at the first of the goals 
to be considered. If a duplicate already exists in the 
present goal list the ck_duplicate fails and create_goals 
is called again to consider the next goal. If there are no 
duplicates, append_best_goal checks to see if another 

goal of a higher priority within the same class has 
already been asserted. If no higher goal has been asserted 
then append_best_goal adds the new goal to the new goal 
1 ist . 

*/ 

create_goals ( [)):-!. /* succedes when no goals are 

specified. */ 

create_goals ( [GllRest] ) :- 

temp_goals (Current_goals ), 
ck_duplicate ( Gl, Current_goals ), 
pick priority set(Gl, Set ), 
append_best_goal(Set,Gl) , 
create_goals ( Rest ),!. 
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create_goals( I G1 1 Rest] ) create_goals ( Rest ). 

ck_dupl Icate ( X, L ) not( member ( X, L )). 

/* before a goal is asserted into the goal list it is 
checked against other goals in its priority set to see if 
a goal of a higher priority has already been asserted. Any 
goal which is not explicitly listed in a priority set fact 
is assumed to be the only member in it's class. 

*/ 

pick_prior ity_set ( X, C ) or ior ity_set ( C ), 

member ( 'i, C ). 

Dick_pr iority_set ( X, [X] ). /» default for singleton sets 

*/ 



/■* If the highest priority item matches the goal then 
append it, check to see if a higher proirity goal has 

been asserted. The procedure stops at the higher priority 
goal if already asserted 
*/ 

append_best_goal ( [ SingieGoal I RestSet ] , SingieGoal ) - 

t3mp_goais (Current_goais ) , 
update i f SinglaGoal i Currant_goais j ) ^ 1 . 

/* assertion */ 

append_besc_goai ( i Si 1 RestSet J ,Single_goal ) 

/* no assertion */ 

temp_goals (Current_goals ) , 
ck_duplicate( Sl,Current_goals ), 
append_best_goal ( RestSet , Single_goal ). 

update ( New_goals ) 

retract ( temp_goals (_) ) , 

asserta ( temp_goals (New_goals ) ) , I . 

difference ( [ ] [ 1 ) . 
difference( ( P I G ], S, G2 ) 
member < P, S ), t, 
difference< G, S, G2 ) . 
difference( I P I G ], S, I P | G2 ] ) :- 
difference( G, S, G2 ). 

subset < f 1 , L ) . 
subset < ( X I L 1, L2 ) :- 
member < X/ L2 ), 
subset( L, L2 ). 

member ( X, I X I L ) ) 

member( X, t Y I L 1 ) :- member( X^ L ) . 
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member2( X, ( X I L I ). 

member 2 < X, ( Y I L ] ) :- member 2 ( X, L ). 

status_meraber ( X, ( X I L 1 ) 

status_member ( X, I Y ) L 1 ) :- status_member ( X, L ) . 

append ( [ 1 , L ) . 



append ( 


[ X 1 L 


1, 


L2, 


( X 1 


L3 J ) :- 






append ( 


L, 


L2, 


L3 ) . 






union< 


n , L, L 


) . 










union( 


{ X 1 LI 




L2, 


L3 ) 


member ( X, 


L2 ) , ! , 












union< LI, 


L2, L3 ) 


union( 


{ X ! LI 


3, 


L2, 


( X 1 


L3 1 ) :- 






union( LI 


/ 


L2, 


L3 ) . 







de lete items < (I, L, L ). 

deieteitan»3( { X I i. ) , L2, L3 ) 

deiete< X, L2, £*4 ), 
deleteitams < L, u4, L3 )- 

deietei X, II ). 

deiet:e< X, I X i L 3 , H ) : - J , delete ( X, L, M ). 

delatai X , ( X ! L ] , [ Y ) M } ) delate < X, L, H ). 



/* The performance guages are the primary area of interest 
and involve the temperatures, pressures, torque, and RPM's of 
var i ous compone n t s . 

*/ 

check_guages ( State ) 

check_revs( State ), 
check ^pressures ( State ), 
check_temps( State ), 
check_torque ( State ). 

/* The rules check_revs,check_pressures,check_temps,and 
check_torque are very similar. Each guage is checked for a 
change in value. A change in value requires a response of 
some sort. The goal is to respond to the guage or light in 
question. 

*/ 

check_revs( State ) 

member 2 (revs (Guage, Value ), State ), 

changed (Up_or_Down) , 

status_member( Value, Up_or_Down) , 

wrlte( ”revs( •*,Guage, ”, ”,Value,”)"),nl,nl, 

create_goals( (revs (Guage, respond) } ) ,fail. 

check_revs( State ). 
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check_pressures ( State ) 

member 2 ( oil_press (Guage, Value ), State ), 

changed ( Up_or_Down ) , 

status_member ( Value, Up_or_Down) , 

vfrlte( "oll_press( "/Guage, ", "/Value,")" ), 

nl,nl, 

create_goals ( ( oil_pr ess (Guage, respond ) 1 ) , fail . 
check_pressures ( State ). 

check_temps( State ) 

member 2 (oll_temp( Guage, Value ), State ), 
changed ( Up_or_Dovm ) , 
status_member( Value, Up_or_Down) , 
write( "oll_temp( "/Guage, ", ",Value,")" ), 
nl, nl, 

create_goals ( ( oi l_temp( Guage, respond ) ] ) , fail . 
check _teraps( State ). 

check_torque ( State ) 

member 2 (torque (Guage, Value ), State ), 

changed ( Up_or_Down ) , 

status_member (Value ,Up_or_Down) , 

wr ite ( "torque (" /Guage ," / ",Value,")" ), 

nl,nl, 

create_goals ( (torque (Guage, respond ) ] ) , fail . 
check_torque ( State ). 



/* check_lights goes through all the caution lights and 
accumulates all the goals necessary to correct the present 
state with respect to the caution panel. 

*/ 

check_lights ( State, Goal_list ) 

segment__panel( Cluster ) , 
scan_panel (Cluster, State ) . 

check_lights( State, Goal_list ) 

temp_goals (Goal_list ) , 
retract ( temp_goals(_) ) . 

/* scan_panel calls each caution light in the panel 

*/ 

scan_panel( I J, State) :-t,fail. 

scan_panel ( ( Seg | Tail ] , State ) : - 

caution_light(State,Seg), 1 , 
scan_panel ( Tail, State ) . 

scan_panel ( ( Seg I Tail ] , State ) ; -scan_panel (Tail, State ) . 
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/*************CAUTI0N AND WARNING LIGHTS *************/ 



segment_panel ( ( engl_oll_press, 

engl_chip_detr , 

engl_fuel_f liter, 

dc_gen_l, 

xms n_c h 1 p_d e t r , 

temp_press_90, 

chip_detr_90, 

xmsn_oil_hot , 

c_box_o I l_press , 

hyd_press_l, 

hyd_temp_l, 

ac_main, 

e ng 1 _go v_ina n , 

f ire_l_pull, 

rpm_rotor_low, 

rpm_ngl, 

xmsn_oil_byp }). 



eng2_oll_press, 
eng2_chip_detr , 
eng2_£uel_£ liter , 
dc_gen__2, 
c_box_chlp_detr , 
teinp_press_4 2 , 
chlp_detr_42, 
xmsn_oll_press, 
c_box_oll_hot , 
hyd_press_2 , 
hyd_temp_2 , 
ac_stby , 
eng2_gov_roan , 
£ire_2_pull, 
rpm_rotor_hlgh, 
rpm_ng2. 



/* The n»aster_caution light is illuminated if there exists 
any caution light that is on 
*/ 

master_caution( State, Goal_list ) 

caution_light ( State, _ ) . 



/* Listed below are the rules for each caution light. Each 
caution light has its own goals to assert and in some cases 
secondary indications are necessary to choose the 
appropriate goals. All sensor information is assumed true 
and is not questioned. This assumption eliminates cross- 
checking requirements. 

*/ 

caution_light ( State, engl_oi l_press ) : - 

member (oil jpress( engl, X ), State ), 
below_limit (L) , status_member (X,L) , 
write( " Caution light: engl_oll _press" ),nl, 
create__goals ( ( off (engl), land(pract) 1 ). 

cautlon_llght ( State, engl_chlp_detr ):- 

member (metal_part lcles( engl) , State ), 
write( ** Caution light: engl_chip_detr " ),nl, 
secondary( State, engl_chip_detr ) . 

caut ion_light ( State, eng2_oil_press ):- 

member (oil_press ( eng2, X ), State ), 
be low_l iml t ( L ) , s tatus_member ( X, L ) , 
write( ** Caution light: eng2_oil_press” )/nl, 
create_goals ( ( o££(eng2), land(pract) 1 ). 

caution_light ( State, eng2_chip_detr ):- 
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member (metal_particles (eng2 ) , State ), 
write( •* Caution light: eng2_chlp_detr '• ),nl, 
secondary (State, eng2_chip_detr ) . 

caut ion_l ight( State, engl_fuel_f liter ):- 

member ( £uel_obstruction(engl) , state ) , 
vnrite( •* (Caution light: engl_fuel_f liter "),nl, 
create_goals ( Iprepare_£or_£ailure(engl) , 
land(pract) 1 ). 

caution_light ( Stats, eng2_fuel_f liter ):- 

member ( £uei_obstruct ion(eng2 ) , State ) , 
write( ” Caution lignt: anq2_fuel_f liter ''),ni, 
creace_goais ( [prepare_for_£ailure(eng2) , 
land (pr act) ] ). 

caut ion_l ight ( State, dc_gen_l );- 

member ( of f ( genl ) , State ), 

write( " Caution light: dc_gen_l '• ),ni, 

create_goais ( t 3 ) , 

caut ion_l ight ( State, dc_gen_l ):- 

memberi failed (geni) , State), 

^ Caution light: dc_gen_l ' ),ni, 
create_goals ( C off (genl; ] ). 

caut ion_l ight ( State, dc_gen_2 ):- 

member (o££(gen2). State ), 

wrlte( •* Caution light: dc_gen_2 '• ),nl, 

create_goals ( I 1 ). 

cautlon_llght( State, dc_gen_2 ):- 

member < tailed (gen2 ) , State), 

wrlte( •* Caution light: dc_gen_2 ” ),nl, 

create_goals ( I o££(gen2) 1 ). 

caut lon_l Ight ( State, xmsn_chlp_detr ):- 

member (metal jpart ides ( xmsn ), State ), 
wrlte( •* Caution light: xmsn_chlp_detr ” ),nl, 
secondary (State, xmsn_chlp_detr ) . 

cautlon_l Ight ( State, c_box_chlp_detr ):- 

member (metal p articles ( c_box ), State ), 
wrlte( •* Caution light: c_box_chlp_detr ” )/nl, 
create_goals ( (power (decrease ), land ( pos ) 1 ). 

caut lon_l Ight ( State, tempjpress_90 ):- 

member (oil_temp( gear_box_90, high ), State ), 
wrlte( " Caution light: temp_press_90 " ),nl, 
create_goals ( I land (pos) 1 ). 
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cautlon_llght ( State, temp_pre3s_90 ):- 

member ( oil_press ( gear_box_90, X ), State ), 
below_llmlt(L ) , status_meraber ( X, L) , 
write( ^ Caution light: temp_press_90 ” ),nl, 
create_goals ( { land(pos) ] ). 

caution_light ( State, temp_press_42 ):- 

member (oil_temp( gear_box_42, high ), State ), 
write( " Caution light: temp_press_42 " )/nl, 
create_goals ( { land(pos) 1 ). 

caution_light ( State, tamp_press_42 ):- 

member (oil_press( gear_box_42, X ), State ), 
below_limit (L) , status_member (X,L) , 
write( " Caution light: temp^ress_42 '• ),nl, 
create_goals ( t land(pos) 3 ). 

caution_light ( State, chip_detr_90 ):- 

member (metal_particies ( gear_box_90 ) , State ) , 
write{ ” Caution light: chip_detr_90 ” ),ai, 
create_goais ( I power ( decrease ) , land ( pract ) 3 ) . 

caution_light ( State, chip_detr_42 ):- 

member (metal_part ides (qear_box_42 ), State ), 
'«rrita< ^ Caution light: chip_detr_42 " ),ai, 
creat:e_goai 3 ( J power {decrease ) , land ( pract ) ] ) . 

caut ion_l ight ( State, xmsn_oil_hot ):- 

member ( oil_temp( xrosn, high ), State ), 
wrlte( *• Caution light: xmsn_oll_hot •* ),nl, 
create_goals( ( power (decrease ) , 

prepare_f or_fai lure ( xmsn) , 
land ( pos ) ] ) . 

caut ion_l ight ( State, xmsn_oil_press ):- 

member (oil_press( xmsn, X ), State ), 
below_l imit ( L) , status_member ( X, L) , 
write( ” Caution light: xmsn_oil_press '* ),nl, 
create_goals( { power (decrease ) , 

prepare_for_f allure ( xmsn) , 
land ( pos ) 3 ) . 

caut ion_l ight ( State, c_box__oi l_press ):- 

member (oil_press( c_box, high ), State ), 
write ( ** Caution light: c_box_oll_press ” ),nl 
create_goals ( ( power (decrease ) , land (pos) ] ) 

caut ion_l ight ( State, c_box_oi l_hot ):- 

member ( oil_temp( c_box, high ), State ), 
write( " Caution light: c_box_oi l_hot •• ),nl, 
create_goals ( ( power (decrease ) , land (pos) 3 ). 
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cautlon_llght ( State, hyd_press_l );- 

member (oil_pr ess ( hyd_sys_l, X ), State ), 
below_llrait (L) , statusjmember ( X, L) , 
write( ** Caution light; hyd_press_l '' ),nl, 
create_goals( ( of f (hyd_sys_l) , land(pos) J ). 

caution_light ( State, hyd_press_2 ):- 

member (oil_press( hyd_sys_2, X ), state ), 
be low_l imi t ( L) , stat us_member ( X , L) , 
vn:ite( " Caution light: hyd_press_2 ” ),nl, 
create_goals ( ( off ( hyd_sys_2 ), land ( pos ) ] ). 

caution_light ( State, hyd_temp_l );- 

member (oil_temp( hyd_sys_l, high ), State ), 
write( ^ Caution light: hyd_terap_l ” )/nl, 
create_goals( I of f (hyd_sys_l) , land(pos) J ). 

caution_light ( State, hyd_temp_2 ):- 

member ( oil_temp( hyd_sys_2, high ), State ), 
write( " Caution light: hyd_temp_2 ” ),nl, 
create_goals ( ( of f ( hyd_sys_2 ) , land ( pos ) ) ). 

caution_l ight ( State, xmsn_oil_byp ):- 

member ( oil_bypass ing_cooler , State ), 
write( ** Caution light: xrasn_oil_byp ** ),nl, 
create_goals ( I power (decrease ) , 

prepare_f or_f a i lure ( xmsn ) , 
land (pos) ] ). 

caution_llght ( State, ac_main ):- 

member ( failed ( roain_inverter ), State ), 
wrlte( " Caution light: ac_main ” ),nl, 
create_goals ( I 1 ). /* not implemented */ 

caution_light ( state, ac_stby );- 

member ( failed ( standby_inverter ), State ), 
wrlte( •* Caution light: ac_stby " ),nl, 
create_goals ( ( 1 ). /* not implemented */ 

cautlon_light( State, engl_gov_raan );- 

member (manual ( govl). State ), 

write( •* Caution light: engl_gov_man •* ),nl, 

create_goals ( 1 1 )./* no goal required */ 

caution_light ( State, eng2_gov_inan ):- 

member (manual ( gov2). State ), 

wrlte( •* Caution light: eng2_gov_man ” )fnl, 

create_goals ( ( 1 )./* no goal required */ 

cautlon_llght( State, fire_l_pull );- 
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meinber( £lre( engl ), State ), 

write ( " Caution light: £ire_ljpull " ),nl, 

create_goals ( t 1 ). 

caution_l ight ( State, £ire_2_pull ):- 
member (£ ire ( eng2 ), State ), 
write( •* Caution light: £ire_2_pull ” ),nl, 
create_goals( ( J ). 

caution_light ( State, rpm_ngl ):- 

member ( revs ( ngl, X ), State ), 
below_limit (L) , status_member ( X,L) , 
write( " Caution light: rpm_ngl ” ),nl, 
create_goals ( ( revs (ngl, respond) 1 ). 

caution_light ( State, rpm_ng2 ):- 

member ( revs ( ng2, X ), State ), 
below_limit (L) , status_member ( X, L) , 
write( ” Caution light: rpm_ng2 ” )rnl, 
create_goals ( t revs ( ng2 , respond ) 1 ). 

caution_light ( State, rpm_rotor_low ):- 

member ( revs ( rotor, low ), State ), 

write ( ” Caution light: rpm_rotor_low " ),nl, 

create_goals ( ( revs ( rotor , respond ) 1 ). 

caution_light ( State, rpm_rotor_high ):- 

member ( revs ( rotor, high ), State ), 

write( ” Caution light: rpm_rotor_high '* )fnl, 

create_goals( ( revs (rotor, respond) 1 ). 



/* secondary state-requirements £or certain caution lights 
are expressed below. 

*/ 

secondary ( State, engl_chip_detr ) :- 

member (oil_press( engl, X ), State ), 
below_limit (L) , status_roember (X,L) , 
create_goals( ( o££(engl),land(pract) 1 ). 
secondary ( State, engl_chip_detr ) :- 

member (oil_temp( engl, high). State ), 
create_goals( ( o££ (engl), land ( pract ) ] ). 
secondary (State, engl_chip_detr ) :- 

create_goals( ( idle(throttlel) , land(pract ) ] ). 

secondary (State, eng2_chip_detr ) :- 

member (oil_press(eng2, X ), State ), 
below_limit (L) , status_member (X,L) , 
create_goals ( ( o££ (eng2 ), land( pract ) 1 ). 
secondary (State, eng2_chlp_detr ) :- 

member (oil_terop( eng 2, high). State ), 
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create_goals ( ( off (eng2 ), land (pract ) 1 ). 

secondary( State, eng2_chip_detr ) 

create_goals ( I idle (throttle2), land ( pract ) ] ). 

secondary (State, xrosn_chlp_detr ) 

member (oil_temp( xmsn,high) , State ) , 
create_goals ( ( prepare_for_fallure(xmsn) , 
land ( pos ) 1 ) . 

secondary( State, xmsn_chip_detr ) 

member ( oil_press (xmsn, X ), State), 
below_limit (L) , status_member (X,L) , 
create_goal3 ( I prepare_f or_failure (xmsn ) , 
land ( pos ) 1 ) . 

secondary ( Stats , xmsn_chip_detr ) 

create_goals ( ( land ( pos )1 ). 

changed ( t erratic, increase , deer ease ) ) . 

below_limit( (none, low] ) . 
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/*<<<<<<<<<<<<<<<< cecoinmended operators >>>>>>>>>>>>>>>>*/ 

/* The recommended facts gives the operator to apply to 
achieve the goals listed. The order in which these facts are 
listed is crutial to the over all performance of the 
planner. Those opeators that are the most difficult to 
satisty come before those that are eaiser. Operators are 
also listed in order of urgency. A given goal may have more 
than one operator that is suitable. These operators are 
ordered in the same manner as above. 

*/ 

reconunended( State, [ revs (ng2, respond ), revs (ngl, respond ) , 

off{gcnl),ot£(gen2), 
of £ (engi ) , off ( eng2 ) , land ( pract ) ] , 

conf irm_duai_eng_failure ) . 

recommended < State, ( revs < rotor , respond ) 3 , 
conf irm_eng2_caiiure ) . 

recommended < State, ( revs < rocor , respond ) 3 , 
conf irm_engi_iai lure ) . 

recommended ( State, f revs ( rotor , respond ) 3 , 
govl_to_manuai ) . 

recommended ( State, i revs(rotor, respond) 3 , 
gov2_co_manuai ) . 

recommended ( State, { torque(xmsn, respond) 3 , 
check_ngl_underspeed ) , 

recommended ( State, ( torque(xmsn, respond) 1, 
check_ng2_underspeed) . 

recoromended( State, (torque(engl,respond ) ] , 
conf irm_nfl_fai lure ) . 

recommended ( State, [ torque (engl, respond ) 3 , 
check_ngl_overspeed ) . 

recommended ( State, [ torque (engl, respond )] , 
check_ngi_underspeed ) . 

recommended( State, (torque(eng2,respond) 1 , 
conf irm_nf2_fai lure) . 

recommended ( State, ( torque ( eng2, respond ) 1 , 
check_ng2_overspeed ) . 

recommended( State, [torque(eng2, respond) 1, 
check_ng2_underspeed ) . 

recommended ( State, [ revs (ngl, respond) J , 
govl_to_manual ) . 

recommended ( State, (revs (nfl, respond) 1, 
govl_to_roanual ) . 

recommended( State, (revs(ng2, respond) 1, 
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gov2_to_manual ) . 

recommended ( State, { revs (n£2, respond) ) , 
gov2_to_manual ) . 

recommended( State, [ land(auto) ] , autorotation). 



recommended( State, ( £ailed(eng2) ] , 
con£irm_eng2_£ailure ) . 
recommended ( State, ( tailed (engl) ) , 
con£irm_engl_£ailure ) . 



recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 



State, 
State, 
State, 
State, 
State , 
State, 



{ £al led (govl ) J ,conf irro_nf l_fai lure ) . 

{ tailed (govl) 1 ,check_ngl_overspeed ) . 

( failed (govl ) ) ,checlc_ngl_underspeed) . 
{ tailed ( gov2 ) ] ,cont irm_n£2_tailure ) . 

{ tai led( gov2 ) ) ,check_ng2_overspeed ) . 

( tailed (gov2 ) ) ,check_ng2_underspeed ) 



recommended ( State, 
recommended ( State, 



t itt (engl, respond ) ) ,govl_to_manual ) . 

( itt(eng2, respond) ] , gov2_to_manual ) 



recommended ( State, 
recommended ( State, 



{ failed(genl) ) ,check_genl_£ailure ) . 
t £ailed(gen2 ) ), check_gen2_£ailure ) . 



recommended ( State, 



(engaged ( seas ) 1 , 



engage_scas ) 



recommended ( State, 
recommended ( State, 



(automatic(gov2) 1 ,gov2_to_automatic) . 
(automatic (govl) ) ,govl_to_automat ic ) . 



recommended ( State, 
recommended ( State, 



( idle (throttle 1 ) 1 , throttle l_idle ) . 
( idle(throttle2) ) , throttle2_idle ) . 



recommended ( State, 
recommended ( State, 
recommended ( State, 
recommended( State, 
recommended ( State, 
recommended( State, 
recommended ( State, 



(ott(engl) ], 
(o££(eng2) J , 
(o££(ecu) ] , 
(o££(genl) 1 , 
(o££(gen2) 1, 

(ott (rain_rmv) 1 , 
{ott(master_arro) ) , 



engl_o£t ) . 
eng2_otf ) . 
ecu_o£t ) . 
genl_otf ) . 
gen2_o£t ) 
rain_rmv_ott ) . 
master_arm_ott ) . 



recommended ( State, 
recommended ( State, 
recommended ( State, 



( land ( pos ) ] , pos 
( land ( pos ) ] , 

( land ( pos ) ) , 



land ing_out ranked 
pos_landingl ) 
pos_landing2 ) 



recommended ( State, ( land ( pract ) 1 , 

pract_landing_outrankedl 
recommended ( State, ( land ( pract )) , 



) . 

pract_landing ) . 



recommended ( State, 
recommended ( State, 



(land (normal) ), 
( land (slope ) 1 , 



normal_approach ) . 
slope_landing ) . 
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recommended ( 
recommended ( 

recommended ( 

recommended ( 



State, [ land (steep) 1 , steep_approach ) 

State, [ land (hlgh_s peed) 1 , 
high_speed_approach ) . 

State, ( land(max_weight ) ) , 
max_welght_landing ). 

State, ( land( sliding) ] , si iding_landing 
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/*<<<<<<<<<<<<<<<<<<< preconditions >>>>>>>>>>>>>>>>>>>*/ 



/* The preconditions for the application of operators 
defined in these facts 
*/ 

preconditlon( State, genl_off ,11). 
preconditlon( State, gen2_off ,tl). 



precondition( State, engl_off ,[1). 
precondit ion( State, eng2_o£f ,[3). 



precondition! State, check_genl_failure 
ammeter (engl, none) ] ) . 



, (on(genl) , 



precondition( State, check_gen2_failura 
ammeter ( eng2 , none ) 3 ) . 



, {on(gen2 ) , 



precondition! State, govl_to_manual , 

(automat ic<govl ) , automat ic( gov2 ) , 
failed (qovl ) , idle ( throttiel ) 1) . 



precondit ion( Stace, govi_to_automatic, 

{ idle ! throctlel ) , manual ( govi >33. 



precondition< State, conf irm_n£l_failure, 

( revs (ngl, erratic) , itt (engl, erratic ) , 
revs (nfl, erratic) , 

torque (engl, erratic ) , automat ic(govl) 1 ) . 

precondition( State, check_ngl_underspeed, 

(revs (ngl, deer ease ) ,revs ( nfl, decrease ) , 
torque (engl, decrease ) ,automatic(govl) 1 ) . 

precondition( State, check_ngl_overspeed, 

{ revs (ngl, increase ) , revs (nfl, increase ) , 
torque ( engl, increase ) , automatic ( govl ) 1 ) . 



preconditlon( State, gov2_to_manual , 

(automatic(gov2 ) , automat ic( govl ) , 
failed(gov2), idle ( throttle2 ) 1 ) . 

preconditlon( State, gov2_to_automatic, 

( idle( throttle2) ,manual(gov2) 1) . 

preconditlon( State, conf irm_nf 2_failure, 

( revs ( ng2, erratic ) , itt (eng2, erratic) , 
revs ( nf 2, erratic ), torque ( eng2, erratic ) , 
automatic(gov2 ) 1 ) . 



are 



i 
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precondlt lon( state, check_ng2_underspeed , 

I revs (ng2, deer ease ) , revs (nf 2, deer ease ) , 
torque(eng2, decrease) ,automatic(gov2) 1 ) . 

precondition( State, check_ng2_overspeed, 

( revs ( ng2, Increase ) , revs ( n£2, Increase ) , 
torque ( eng2, increase ), automat ic (gov2 ) 1 ) . 

preconditlon( State, autorotation, ( failed (engl) , 
failed(eng2) ] ) . 

precondition( State, high_speed_approach, { fire(_)j). 

precondition( State, max_weight_landing, 

( gross_we ight ( heavy ) , 
landing_zone ( clear ) J ) . 

precondition( State, 3liding_landing, (power! low), 
landing_3one (clear ) ] ) . 

precondition! State, oos_land inq_outranked , 

C land (auto ) ] ) - 

oracondi t ion( Stata, pos_iandingi , 

{failed(engi) ] ) . 

precondition! State, pos_landlng2, 

[£ailed(eng2) ] ) . 

precondition! State, pract_landing, 

[ land ing_zone! clear ) J ) . 

precondition! State, pract_landing_outrankedl, 

( land!pos ) 1 ) . 

precondition! State, norma l_approach, 

[ revs! rotor, ok ), off! master_cautlon ), 
engaged! seas ) , of £ ! ecu ) , off ! raln_rmv) , 
off! master_arm ), landing_zone !clear ) J ) . 

precondition! State, slope_landing, 

C revs! rotor, ok ), off! master_caut ion ), 
engaged! seas ),o££! ecu ),o££! raln_rmv ), 
off !master_arm ), 

landlng_zone ! slope ) , gross_we ight ! moderate ) 1 ) . 

precondition! State, con£irm_engl_£allure, 

(torque!engl,none), torque !xmsn, low) , revs!ngl,none ) , 
revs ! nfl, none ) , oll_press!engl,none ) , £ailed!genl) , 
itt!engl,none ) , left yaw, on ! f uell ) , f ull ! throttlel ) , 
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revs(rotor, low) 1 ) . 



precondition( State, conf irm_eng2_£ailure, 

( torque ( ehg2, none ) , torque ( xmsn, low) , revs ( ng2, none ) , 
revs(n£2,none), oil_press (eng2, none ) , £ailed(gen2 ) , 
Itt (eng2, none ) , le£t_yaw, on(£uel2), £ull ( throttle2 ) , 
revs(rotor, low) 1 ) . 

precondl t ion( State, con£irm_dual_eng_£ailure, 

( oil_press(engl,none) , oil_press(eng2,none) , 
revs ( rotor , low) , £ull ( throttle! ) , £ull ( throttle2 ) , 
on(£uell), on(£uel2), torque (engl, none ) , 
torque(eng2,none) , torque ( xmsn, low) , revs ( ngl, none ) , 
revs (ng2, none ) , revs(n£l,none), revs(n£2,none ) , 

£a I led(genl ) , £ailed (gen2 ) , o££ ( seas ) , i tt (engl , none ) , 
itt (eng2, none ) , le£t_yaw 1). 



precondit ion( 
precondition ( 
precondit ion ( 
precondition( 
precondition( 
precondition( 



State, engage_scas, ( J ). 
State, ecu_o££,(] ). 

State, rain_rrav_o££, ( ) ) . 
State, master_arm_o££, t ) ) . 
State, thrott lel_idle , t ) ) . 
State, throttle2_ldle, ( ) ) . 
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/*<<<<<<<<<<<<<<<< deletepostconditlons >>>>>>>>>>>>>>>>*/ 

/* The respective state elements to be deleted from the 
state description, for each operator are defined in these 
facts . 

*/ 



deletepostcondit ion ( State, genl_off, (on(genl)] ). 

deletepostcondltlon( State, gen2_off, (on(gen2)l ). 

deletepostcondition( State, engl_off, (on(engl)l ). 

deletepostcondltion( State, eng2_off, Con(eng2)] ). 

deletepostcondition ( State,check_genl_f allure, ton(genl) ] ) . 

deletepostcondit Ion ( State,check_gen2_f allure, {on(gen2) J ) . 

deletepostcondition( State, conf irm_engl_fai lure , 

(on(ecu) ] ) . 

deletepostcondition( State, conf i rm_eng2_f allure, 

(on(ecu) ] ) . 

deletepostcondit ion( State, conf irm_dual_eng_failure, 

(on(ecu) ] ) . 



deletepostcondition ( State, govl_to_manual, 

(automat ic(govl) , idle ( throttlel ) , 
revs(ngl,_), itt(engl,_), 
revs(nfl,_) , revs ( rotor ,_) , 
torque ( engl, _) ] ) . 

deletepostcondit ion ( State, govl_to_automa tic, 

(manual (govl) , manual ( throttlel ) ] ) . 

deletepostcondition( State, conf irm_nfl_failure, ( 1 ) . 

deletepostcondition ( State, check_ngl_under speed, ( 1 ) . 

deletepostcondit ion( State, check_ngl_overspeed, ( 1 ) . 

deletepostcondition ( State, gov2_to_manual , 

(automatic (gov2 ) , idle( throttle 2 ) , revs ( ng2,_) , 
itt (eng2,_) ,revs (nf 2,_) ,revs(rotor,_) , 
torque(eng2,_) ] ) . 

deletepostcondition( State, gov2_to_automatic, 

(manual(gov2) ,manual ( throttle2) 1 ) . 
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deletepostcondit ion ( 


State,con£irm_n£2_f allure, ( ) ) . 


deletepostcondit ion ( 


State ,check_ng2_underspeed, ( 1 ) . 


deletepostcondit ion ( 


State, check_ng2_overspeed, ( J ) . 


deletepostcondit ion ( 


State, throttlel idle, 
(£ull(throttlel) J) . 


deletepostcondit ion ( 


State, throttle2_idle, 
l£ull(throttle2) 1) . 


deletepostcondit ion ( 


State, eca_off, [on (ecu) I). 


de let epos tcondition( 


State, engage_scas, { of f { seas ) 1 ) . 


deletepostcondit ion ( 


State, rain_rmv_o£f , ( on< rain_rinv ) 3 ) . 


deletepostcondit ion ( 


State, macter_arm_of f , 
[ on(inaster_arm) ] ) . 


deletepostcondit ion ( 


State, aormai_approach, [aititade{_) , 
airspeedi _) ] ) . 


de ietepostcond it ion< 


Stace, 3 iope_landinq, [ ai t i tude ( _) , 

airspeed (_)]). 


deletepostcondit ion ( 


State, steep_approach, (altitude(_) , 
airspeed(_) ) ) . 


deletepostcondit ion ( 


State, high_speed_approach. 



(altitude (_) , airspeed(_) J ) . 

deletepostcondit lon( State, max_weight_landing, 

(altitude (_) , airspeed (_)]) . 

deletepostcondit ion( State, sliding_landing, 

(altitude(_) , airspeed (_) 1 ) . 

deletepostcondit ion( State, pract_landlng_outrankedl, 

( 1) . 

deletepostcondition( State, pract_landing, 

(altitude (_) , airspeed(_) 1 ) . 

deletepostcondition( State, pos_landing_outranked, 

( ]) . 

deletepostcond it ion( State, pos_landingl, 

(altitude (_) , airspeed(_) 1 ) . 
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deletepostcondlt lon( State, pos_landing2, 

[altitude (_) , airspeed(_) ] ) . 

deletepostcondlt lon( State, autorotation, 

( f ull ( throttlel ) , full ( throttle 2 ) , airspeed ( 
altitude(_), revs(rotor,_) 1 ) . 
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/*<<<<<<<<<<<<<<<<< addpostconditions >>>>>>>>>>>>>>>>>>*/ 

/* The respective state elements to be added to the state 
description, for each operator are defined in these facts. 

*/ 



addpostcondition( 


chec)c_genl 


failure. 


( 


of f (genl ) , 


failed(genl) )) 


addpostcondition( 


chec)c_gen2 


_failure. 


( 


of f (gen2 ), 


failed(gen2 ) ] ) 


addpos tcond i t i on ( 


genl_of f , 




( 


of f (genl ) 


1) . 


addpostcondit ion ( 


gen2_of f , 




( 


of f (gen2) 


1) . 


addpostcondit ion ( 


engl_of f , 




( 


of f ( engl ) 


1) . 


addpostcondit ion ( 


eng2_of f , 




{ 


off (eng2 ) 


]) . 


addpostcondicion( 


autorotation. 



i idle ( throttlel ) , idle ( throttle 2 ) , 

air speed ( 0 ) , altitude ( 0 ) ,revs (rotor , respond ) , 

land (auto) ) ) . 

addpostcondition( conf irm_engl_failure, 

( off (ecu), failed (engl), revs (ngl, respond) , 
revs (nfl, respond) , re vs (rot or, res pond) , 

itt (engl, respond ) , torque ( engl, respond ) , 
torque ( xmsn, respond) ) ) . 

addpostcondition( conf irm_eng2_fai lure, 

( of f (ecu ) , failed (eng2 ) , revs (ng2, respond ) , 
revs(nf2, respond) , revs ( rotor , respond ) , 
itt (eng2, respond ) , torque (eng 2, respond ) , 
torque (xmsn, respond) 1 ) . 

addpostcondition( conf irm_dual_eng_failure, 

( off (ecu), failed (engl), failed (eng2), off (genl) , 
off(gen2), off(engl), off(eng2), revs (ngl, respond) , 
revs (nfl, respond) , re vs (rotor, respond) , 
itt (engl, r espond ) , itt (eng2, respond) , 
revs ( ng2, respond ) , revs(nf2, respond) 1) . 



addpostcondit ion ( govl_to_manual , 
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( manual ( govl ) , manual ( throttlel) , 

revs( ngl, ok ) , itt(engl,ok) , revs ( n£l,ok ) , 

revs<rotor,ok), torque (engi, ok ) , 

torque (engl, respond), revs (ngl, respond) , 

revs (nfl, respond) ,revs(rotor, respond ) , 

ltt(engl, respond) J ) , 

addpostcondition(govl_to_autoroatic, [ automatic (govl) 1 ) . 

addpostcondition(conf irm_nf l_failure, ( revs ( ngl, respond ) , 

revs(n£l, respond) , £ailed(govl) , 
torque <engl, respond) ] ) . 

addpostcondl t ion ( check_ngl_under speed, { revs ( ngl, respond ) , 

revs ( n£l, respond ) , £alIed(govl) , 
torque(engl, respond) ] ) . 

addpostcondition(check_ngl_overspeed, { revs (ngl, respond) , 

revs ( nfl, respond ) , £ailed(govl) , 
torque (engl, respond ) 1 ) . 

addpostcondit ion ( gov2_to_manual, 

(manual < go v2 ) , manual ( throttle2 ) , revs ( ng2 , ok ) , 
i tt (eng2, ok ) ,revs ( n£2 , ok ) , revs ( rotor , ok ) , 
torque ( eng2, ok ) , torque (eng 2, respond ) , 
revs (ng2, respond ) , revs ( n£2 , respond ) , 
revs ( rotor , respond ) , ltt(eng2, respond) J ) . 

addpostcondition(gov2_to_automatic, (automatic ( gov2 ) 1 ) . 



addpostcondition(con£irm_n£2_£ailure, (revs ( ng2, respond) , 
revs(n£2, respond) , tailed (gov2 ) , 
torque (eng2, respond) 1 ) . 

addpostcondit ion ( check_ng2_underspeed, ( revs ( ng2, respond ) , 

revs(n£2, respond) , £ailed(gov2) , 
torque(eng2, respond) 1 ) . 

addpostcondi t ion (check_ng2_over speed, ( revs ( ng 2, respond) , 

revs(n£2, respond), failed (gov2 ) , 
torque ( eng2 , respond ) ] ) . 



addpostcondition( 
addpostcondit ion ( 
addpostcond i t i on ( 
addpostcondi t ion ( 
addpostcondi t ion ( 



throttlel_idle, ( idle( throttlel ) 1 ) . 
throttle2_idle, ( idle( thrott le2 ) 1 ) . 
ecu_o££, (o££(ecu)l). 
engage_scas , ( engaged ( seas ) 1 ) . 
rain_rmv_o£f , (o££(rain_rmv) 1 ) . 
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addpostcondition( roaster_arm_of f , { of f (master_arm) ) ) . 



addpostcond i t ion ( norma l_approach , 

(land (normal)^ altitude(O), alrspeed<0) ] ) 

addpostcondit ion( slope_landing, 

( land ( slope ) , altitude(O), airspeed ( 0 )]) . 

addpostcondit ion ( steep_approach, 

[ land (steep) , altitude(O), airspeed ( 0 )]) . 

addpostcond it ion ( hiqh_3peed_apptoach , 

C land (high_speed ) , altitude(O), airspeed ( 0 ) J ) , 

addpostcond! t ion ( max_we ight_landing, 

( land (inax_weight ) , altitude(O), airspeed ( 0 )]) . 

addpostcond i t ion ( si id ing_land inq, 

[ land (sliding ) , altitude(O), airspeed ( 0 )]) . 

addpostcond it ion ( pos _land ing_outranked 

( land ( pos ) ] ) . 



addpostconditioni pos_landingi , 

[iand(pos), altitude(O), airspeed ( 0 )]) , 

addpostcondit ion ( pos_landing2, 

(land(pos), altitude(O), airspeed ( 0 ) J ) 

addpostcondit ion( pract_landing, 

(land(pract)^ altitude(O), airspeed( 0 ) ] ) . 



addpostcondit ion ( pract_land ing_out ranked 1, 

( land (pract ) J ) . 
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/*<<<<<<<<<<<<<<<<<<<< PRIORITY SETS >>>>>>>>>>>>>>>>>>>>*/ 



/* These sets define the relative priority among its 
elements. If an element of a higher priority has been 
asserted as a goal no lower priority elements will be 
asserted . 

*/ 

prior ity_set( ( falled(engl) , off(engl)l). 

prior ity_set( I failed (eng2 ) / off(eng2)l). 

prior ity_set ( { land ( pos ) , land ( pract ) ] ) . 

pr ior ity_set ( [ land(siope ) , land ( high_speed ) , 

land (max_weight ) , land ( sliding ) , iand(steep), 
land ( normal ) ) ) . 

prior ity_set n power ( none ) , power (low), power {decrease ) , 

power ( increase ) ] ) . 

prior ity_sec( [power (none ) , power(low), power(ok)3). 
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/*<<<<<<<<<<<<<<<<<<<< test cases >>>>>>>>>>>>>>>>>>>>*/ 



/* 



testl normal state */ 



testl(Oplist,Goalstate ) problem_solver 

( I revs(rotor,ok), £ull(£uel), engaged ( seas ) , on(ecu), 
o£f (rain_rmv), o££ (master_arro) , landing_zone (clear ) , 
£ull(throttlel) , £ull ( throttle2 ) , o££(master_caution) , 
automat ic( govl ) , automatic (gov2 ) , on(£uell), on(£uel2), 
normal ( £uel_press ) , torque(engl,ok ) , torque (eng2, ok ) , 
torque (xmsn, ok ) , revs (ngl, ok ) , revs ( ng2 , ok ) , revs(n£l,ok ) , 
revs ( n£2, ok ) , oil_temp(engl,ok ) , oil_temp(eng2,ok), 
oil_press(engl,ok ) , oil_press (eng2,ok ) , on(genl), on(gen2), 
ol l_temp( c_box, ok ) , oil_press(c_box,ok ) , oi l_temp( xmsn, ok ) , 
oil jpress ( xmsn, ok ) , ammeter (genl, ok ) , ammeter ( gen2 , ok ) , 
£uel jpress (ok ) , itt ( engl , ok ) , Itt (eng2, ok ) , 
oil_press ( hyd_sys_l, ok ) , oil_press ( hyd_sys_2 , ok ) , 
a irspeed ( 100 ) , alt I tude ( 1000 ) } , 



Oplist, Goalstate ). /* £inal state and how we got there */ 



/* test2 dual eng failure */ 
test2 (Oplist , Goalstate ) problem_solver 

( ( oll_press(engl,none), oil_press(eng2,none) , 

revs (rotor , low) , o££(rain_rmv), o££ ( master_arm) , 

land lng_zone( clear ) , £ull ( throttlel ) , £ull ( throttle2 ) , 

o££ (master_caution ) , automatic ( govl ) , automatic ( gov2 ) , 

on(£uell), on(£uel2), normal ( £uel_press ) , torque (engl, none ) , 
torque (eng2, none ) , torque ( xmsn, low) , revs ( ngl, none ) , 

revs ( ng2, none ) , revs(n£l,none) , revs ( n£2, none ) , 

oil_temp( engl, ok ) , oil_temp(eng2,ok ) , £ailed(genl) , 

£ailed(gen2 ) , £ull(£uel), o££(scas), on(ecu), 

oil_temp(c_box,ok ) , oil_press (c_box, ok ) , oil_temp(xmsn,ok) , 
oi l_press (xmsn, ok ) , ammeter ( genl, none ) ,ammeter (gen2, none ) , 

£uel_press ( ok ) , itt (engl, none ) , itt (eng2,none ) , 

oi l_press ( hyd_sys_l, ok ) , oil_press(hyd_sys_2,ok) , 

airspeed(lOO), altitude ( 1000 ) , le£t_yaw 1, 

Oplist, Goalstate ). /* £inal state and how we got there */ 



/* tests single eng £ailure */ 

test3(Opllst, Goalstate ) problem_solver 

( loil_press(engl,none ) , oil_press(eng2,ok), revs (rotor , low) , 
o££( rain_rmv) , o££ (master_arm) , landing_zone (clear ) , 
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£ull( thcottlel) , 
automatic (govl ) , 
normal ( f uel_press ) 
torque ( xmsn, low ) , 
revs ( n£l/ none ) , 
oil_temp( eng2,ok ) , 
on(ecu), oil 

oll_temp( xrasn, ok ) , 
ammeter (gen2, ok ) , 
itt (eng2,ok ) , 
o I l_press ( hyd_sys_: 
left_yaw j. 



£ull( throttle 2 ) , o££ (master_cautlon) 

automat ic ( gov2 ) , on(£uell), on(£uel2) 
torque (engl, none ) , torque (eng2, ok ) 
revs ( ngl, none ) , revs(ng2,ok) 

revs(n£2,ok) , oll_temp(engl,ok) 

failed(genl) , full(fuel), o£f(scas) 
_temp(c_box,ok) , oil_press(c_box,ok) 

oil_press(xmsn,ok) , ammeter ( genl, none ) 
£uel_press ( ok ) , itt (engl, none ) 

oil_press (hyd_sys_l,ok ) 
2, ok), airspced( 100 ) , alt itude ( 1000 ) 



Oplist, Goalstate ) . /* final state and how we got there */ 



/* test4 single engl failure + n£2 gov failure */ 

test4 (Oplist , Goalstate ) problem_solver 

(( oi l_press (engl, none ) , oi l_press ( eng2 , ok ) , revs ( rotor , low) 
off (rain_rmv) , of f ( master_arm) , landing_zone (clear ) 

full ( throttlel ) , full ( throttle2 ) , of f ( mas ter_caut ion ) 

automat ic ( govl ) , automatic(gov2 ) , on(fuell), on(fuel2) 

normal ( fuel_press ) , torque ( engl , none ) , torque ( eng2 , errat ic ) 
torque ( xmsn, low) , torque ( xmsn, erratic) , revs ( ngl, none ) 

revs(ng2, erratic) , revs ( nfl , none ) , revs(nf2, erratic) 

oil_temp( engl, ok ) , oil_temp(eng2,ok ) , failed(genl) 

full(fuel), off(scas), on(ecu), oi l_temp( c_box, ok ) 

oll_press (c_box, ok ) , oll_temp(xmsn,ok) , oil_press ( xmsn, ok ) 
ammeter (genl, none ) , ammeter(gen2,ok) , fuel_press( ok ) 
itt(engl,none ) , itt (eng2, erratic ) , oil_press (hyd_sys_l,ok ) 
oll_press ( hyd_sys_2 , ok ) , airspeed( 100 ) , altitude ( 1000 ) 

le£t_yaw ) , 

Oplist, Goalstate ) . /* final state and how we got there */ 



9 

/ 

/ 
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